9743 matches found
PT-2022-25395 · Unknown · Phpgurukul Blood Bank & Donor Management System
Name of the Vulnerable Software and Affected Versions: Phpgurukul Blood Donor Management System version 1.0 Description: The issue allows Cross Site Scripting via the Add Blood Group Name Feature. Recommendations: For Phpgurukul Blood Donor Management System version 1.0, consider disabling the Ad...
PT-2022-27135 · Tenda · Tenda Ac18
Name of the Vulnerable Software and Affected Versions: Tenda AC18 version 15.03.05.19 Description: The issue is related to a Buffer Overflow that can be triggered via the formSetMacFilterCfg function. Recommendations: For Tenda AC18 version 15.03.05.19, consider disabling the formSetMacFilterCfg...
PT-2022-27132 · Tenda · Tenda Ac18
Name of the Vulnerable Software and Affected Versions: Tenda AC18 version 15.03.05.19 Description: The issue is related to a Buffer Overflow that can be triggered via the form fast setting wifi set function. This can potentially allow for unauthorized access or code execution. Recommendations: Fo...
PT-2022-27125 · Tenda · Tenda Ac15
Name of the Vulnerable Software and Affected Versions: Tenda AC15 version 15.03.05.19 Description: The issue is related to a Buffer Overflow that can be triggered via the formSetIpMacBind function. This allows for potential exploitation. No information is provided about the estimated number of...
PT-2022-25457 · Unknown · Davidmoreno Onion
Name of the Vulnerable Software and Affected Versions: davidmoreno onion affected versions not specified Description: A problematic issue was found in the function onion response flush of the file src/onion/response.c of the component Log Handler. The manipulation leads to allocation of resources...
PT-2022-26130
Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.11 TensorFlow versions 2.10.1 and earlier TensorFlow versions 2.9.3 and earlier TensorFlow versions 2.8.4 and earlier Description TensorFlow is an open source platform for machine learning. Inputs dense features ...
PT-2022-24793 · Unknown · College Management System
Name of the Vulnerable Software and Affected Versions: College Management System version 1.0 Description: The issue allows an admin user to upload a .php file containing malicious code via the student.php file, potentially leading to remote code execution. The authentication required for this...
kernel: ath11k: fix the warning of dev_wake in mhi_pm_disable_transition()
In the Linux kernel, the following vulnerability has been resolved: ath11k: fix the warning of devwake in mhipmdisabletransition When test device recovery with below command, it has warning in message as below. echo assert /sys/kernel/debug/ath11k/wcn6855\ hw2.0/simulatefwcrash echo assert...
kernel: sfc: fix use after free when disabling sriov
In the Linux kernel, the following vulnerability has been resolved: sfc: fix use after free when disabling sriov Use after free is detected by kfence when disabling sriov. What was read after being freed was vf-pcidev: it was freed from pcidisablesriov and later read in efxef10sriovfreevfvports,...
PT-2022-26226 · Tenda · Tenda Ac1200 Router
Name of the Vulnerable Software and Affected Versions: Tenda AC1200 Router Model W15Ev2 version V15.11.0.101576 Description: The issue is related to a stack overflow via the setRemoteWebManage function, allowing attackers to cause a Denial of Service DoS via crafted overflow data. Recommendations...
PT-2022-25340 · Apache · Apache Archiva
Name of the Vulnerable Software and Affected Versions: Apache Archiva versions prior to 2.2.9 Description: The issue allows an anonymous user to read arbitrary files, including the database file, directly without logging in if anonymous read is enabled. Recommendations: For Apache Archiva version...
PT-2022-26950 · WordPress · Wordpress
Name of the Vulnerable Software and Affected Versions: WordPress versions prior to 6.0.3 Description: The issue allows a remote unauthenticated attacker to obtain the email address of the user who posted a blog using the WordPress Post by Email Feature. Recommendations: For WordPress versions pri...
PT-2022-27493 · Jenkins · Jenkins Ns-Nd Integration Performance Publisher Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins NS-ND Integration Performance Publisher Plugin versions 4.8.0.143 and earlier Description: The issue concerns the global and unconditional disabling of SSL/TLS certificate and hostname validation for the entire Jenkins controller JVM...
PT-2022-26273 · Liferay · Friendly Url Module +2
Name of the Vulnerable Software and Affected Versions: Liferay Portal versions 7.4.3.5 through 7.4.3.36 Liferay DXP 7.4 update 1 through 36 Description: The issue concerns the Friendly Url module, which does not properly check user permissions. This allows remote attackers to obtain the history o...
PT-2022-26264 · Liferay · Liferay Dxp +1
Name of the Vulnerable Software and Affected Versions: Liferay Portal versions 7.3.5 through 7.4.2 Liferay DXP 7.3 before update 8 Description: Certain Liferay products are vulnerable to Cross Site Scripting XSS via the Commerce module. Recommendations: For Liferay Portal versions 7.3.5 through...
PT-2022-11592 · Unknown · Phpservermon
Name of the Vulnerable Software and Affected Versions: phpservermon affected versions not specified Description: A problematic issue was found in phpservermon, affecting the generatePasswordResetToken function of the file src/psm/Service/User.php. The manipulation leads to the use of a predictabl...
PT-2022-11593 · Unknown · Phpservermon
Name of the Vulnerable Software and Affected Versions: phpservermon affected versions not specified Description: A vulnerability was found in phpservermon, affecting the function setUserLoggedIn of the file src/psm/Service/User.php. The manipulation leads to the use of a predictable algorithm in ...
PT-2025-8624 · Linux +3 · Linux Kernel +3
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.19.0-rc2-syzkaller-00160-g274295c6e53f Description: A vulnerability has been resolved in the Linux kernel. The issue is related to the erspan module, where it was assumed that the transport header is always se...
GSD-2022-1007263 tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
tty: serial: fsllpuart: disable dma rx/tx use flags in lpuartdmashutdown This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.150 by commit...
