PT-2022-7419 · Mplayer +3 · Mplayer +3

Name of the Vulnerable Software and Affected Versions: MPlayer versions SVN-r38374-13.0.1 Description: The issue is related to memory corruption via the function free mp image of libmpcodecs/mp image.c and also involves the mov build index function, which is associated with a buffer overflow. Thi...

CVE-2022-35947

GLPI stands for Gestionnaire Libre de Parc Informatique and is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. Affected versions have been found to be vulnerable to a SQL injection attack which an attacker could...

UBUNTU-CVE-2022-31187

GLPI stands for Gestionnaire Libre de Parc Informatique and is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. Affected versions were found to not properly neutralize HTML tags in the global search context. Users...

CVE-2022-31187 Stored Cross Site Scripting (XSS) through global search in GLPI

GLPI stands for Gestionnaire Libre de Parc Informatique and is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. Affected versions were found to not properly neutralize HTML tags in the global search context. Users...

CVE-2022-35947 SQL injection in GLPI

GLPI stands for Gestionnaire Libre de Parc Informatique and is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. Affected versions have been found to be vulnerable to a SQL injection attack which an attacker could...

PT-2022-25438 · Ansys · Ansys Spaceclaim

Name of the Vulnerable Software and Affected Versions: Ansys SpaceClaim version 2022 R1 Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The fla...

PT-2022-25460 · Nikon · Nikon Nis-Elements Viewer

Name of the Vulnerable Software and Affected Versions: NIKON NIS-Elements Viewer version 1.2100.1483.0 Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a maliciou...

PT-2022-23835 · Paymoney · Paymoney

Name of the Vulnerable Software and Affected Versions: PayMoney version 3.3 Description: The issue is related to Client Side Remote Code Execution RCE and exists in the reply ticket function, where uploading a malicious file can lead to execution of remote code. When a victim downloads and opens...

PT-2022-23831 · Paymoney · Paymoney

Name of the Vulnerable Software and Affected Versions: PayMoney version 3.3 Description: The issue is related to Stored Cross-Site Scripting XSS that occurs during the process of replying to a ticket. This can be achieved by injecting a specially crafted payload into the "Message" field using the...

PT-2022-25458 · Nikon · Nikon Nis-Elements Viewer

Name of the Vulnerable Software and Affected Versions: NIKON NIS-Elements Viewer version 1.2100.1483.0 Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a maliciou...

PT-2022-7402 · Glpi +2 · Glpi +2

Name of the Vulnerable Software and Affected Versions: GLPI versions prior to 10.0.3 Description: The issue is related to the lack of neutralization of HTML tags during web page generation, which can allow a remote attacker to conduct a cross-site scripting attack. The affected versions do not...

PT-2022-23368 · Osu Open Source · Vncauthproxy

Name of the Vulnerable Software and Affected Versions: OSU Open Source Lab VNCAuthProxy versions 1.1.1 and earlier Description: The issue is an authentication-bypass vulnerability in the VNCServerAuthenticator, located in vncap/vnc/protocol.py, which could allow a malicious actor to gain...

PT-2022-24037 · Smartrg · Smartrg Sr506N +1

Name of the Vulnerable Software and Affected Versions: SmartRG SR506n version 2.5.15 SmartRG SR510n version 2.6.13 Description: The issue allows for Remote Code Execution RCE via the ping host feature. Recommendations: For SmartRG SR506n version 2.5.15, consider disabling the ping host feature...

PT-2022-8058 · Smarty +2 · Smarty +2

Name of the Vulnerable Software and Affected Versions: Smarty versions prior to 3.1.47 Smarty versions 4.x prior to 4.2.1 Description: The issue allows cross-site scripting XSS in the libs/plugins/function.mailto.php file. A web page using smarty function mailto and parameterized with GET or POST...

WordPress Disable User Login plugin <= 1.0.1 - Unauthenticated Settings Update vulnerability

Unauthenticated Settings Update vulnerability discovered by Rafshanzani Suhada in WordPress Disable User Login plugin versions = 1.0.1. Solution No patched version available...

PT-2022-7405 · Glpi +2 · Glpi +2

Name of the Vulnerable Software and Affected Versions: GLPI versions prior to 10.0.3 Description: The issue is related to a SQL injection attack that could allow an attacker to simulate an arbitrary user login. This is due to the lack of protection measures for the SQL query structure. The...

kernel: ice: Fix memory corruption in VF driver

In the Linux kernel, the following vulnerability has been resolved: ice: Fix memory corruption in VF driver Disable VF's RX/TX queues, when it's disabled. VF can have queues enabled, when it requests a reset. If PF driver assumes that VF is disabled, while VF still has queues configured, VF may...

PT-2022-4787 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows versions prior to the fixed version Description: The vulnerability is related to errors in handling input data in the implementation of the TCP/IP protocol in Windows operating systems. This issue allows a remote attacker to execute...

PT-2022-24427 · Lief · Lief

Name of the Vulnerable Software and Affected Versions: LIEF version 365a16a Description: A heap-buffer overflow issue was discovered via the function print binary at /c/macho reader.c. This issue affects LIEF and can be exploited. Recommendations: For LIEF version 365a16a, update to a version tha...

PT-2022-25013 · Nokia · Nokia 1350 Oms

Name of the Vulnerable Software and Affected Versions: NOKIA 1350 OMS version R14.2 Description: The issue allows authenticated users to execute commands on the operating system due to multiple OS Command Injection vulnerabilities. These vulnerabilities occur in the /cgi-bin/R14.2/log.pl endpoint...