CVE-2022-47040

An issue in ASKEY router RTF3505VW-N1 BRSVg000R3505VMN1001s327 allows attackers to escalate privileges via running the tcpdump command after placing a crafted file in the /tmp directory and sending crafted packets through port 80...

CVE-2022-48125

creationtimestamp| type| source ---|---|--- 2023-01-20 18:27:32+00:00| seen| https://t.me/cibsecurity/56754 2025-04-03 15:35:11+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10254...

PT-2023-34291 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 2.6.30 through 5.15.85 Description: A possible memory leak issue has been identified, which may have potential security implications. The actual impact and likelihood of an attack have not been confirmed. Recommendations...

PT-2023-18391 · M-Filter · M-Filter

Name of the Vulnerable Software and Affected Versions: m-FILTER versions prior to 5.70R01 Ver.5 Series m-FILTER versions prior to 4.87R04 Ver.4 Series Description: The issue allows a remote unauthenticated attacker to bypass authentication and send users' unintended email when email is being sent...

PT-2023-33184 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.85 Description: The issue is related to extending a file within the last block. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2023-34047 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.86 Description: A potential issue exists in the Linux Kernel, specifically in the lpfc scsi module, where reading the rx monitor from debugfs can cause a hard lockup. The actual impact and attack...

PT-2023-34201 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.86 Description: The issue is related to a memory leak in the socfpga gate init function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior...

PT-2023-33243 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.82 Description: The issue provides a little extra FRAME WARN leeway when KASAN is enabled. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions pri...

PT-2023-34022 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.87 Description: A potential security issue has been identified in the Linux Kernel, related to the fs/ntfs3 module. The issue concerns the attr load runs vcn function, where a null pointer check has been...

CVE-2022-22088 Integer Overflow to Buffer Overflow in Bluetooth HOST

Memory corruption in Bluetooth HOST due to buffer overflow while parsing the command response received from remote...

Brave 安全漏洞

Brave is a fast, private and secure web browser from Brave USA. A security vulnerability exists in Brave Browser versions prior to 1.43.88 that could allow a remote attacker to cause a denial of service in private and guest windows via a crafted HTML file containing an ipfs:// or ipns:// URL...

PT-2022-36127 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.80 Description: A potential security issue exists in the gfs2 component of the Linux Kernel. The issue involves checking sb bsize shift after reading the superblock. The actual impact and attack plausibili...

PT-2022-36158 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.80 Description: The issue is related to memory leaks when changing VLAN protocol in the bridge switchdev. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kern...

PT-2022-27950 · Jenkins · Jenkins Custom Build Properties Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Custom Build Properties Plugin versions 2.79.vc095ccc85094 and earlier Description: The issue results in a stored cross-site scripting XSS vulnerability due to the plugin not escaping property values and build display names on the...

CVE-2022-28607

An issue was discovered in asith-eranga ISIC tour booking through version published on Feb 13th 2018, allows attackers to gain sensitive information via the action parameter to /system/user/modules/modusers/controller.php...

PT-2022-5730 · Tp Link · Tp-Link Tl-Wr940N

Name of the Vulnerable Software and Affected Versions: TP-Link TL-WR940N version 3.20.1US Description: This issue allows network-adjacent attackers to disclose sensitive information on affected installations. Authentication is not required to exploit this issue. The specific flaw exists within th...

PT-2022-5731 · Tp Link · Tp-Link Tl-Wr940N

Name of the Vulnerable Software and Affected Versions: TP-Link TL-WR940N version 3.20.1US Description: This issue allows network-adjacent attackers to bypass authentication on affected installations of TP-Link TL-WR940N routers. The specific flaw exists within the httpd service, which listens on...

CVE-2022-3737

In PHOENIX CONTACT Automationworx Software Suite up to version 1.89 memory can be read beyond the intended scope due to insufficient validation of input data. Availability, integrity, or confidentiality of an application programming workstation might be compromised by attacks using these...

AZL-11429 CVE-2022-45063 affecting package xterm for versions less than 380-1

xterm before 375 allows code execution via font ops, e.g., because an OSC 50 response may have Ctrl-g and therefore lead to command execution within the vi line-editing mode of Zsh. NOTE: font ops are not allowed in the xterm default configurations of some Linux distributions...

AZL-11046 CVE-2022-35252 affecting package curl for versions less than 7.86.0-1

When curl is used to retrieve and parse cookies from a HTTPS server, itaccepts cookies using control codes that when later are sent back to a HTTPserver might make the server return 400 responses. Effectively allowing a"sister site" to deny service to all siblings...