PT-2022-4421 · Microsoft · Windows Sstp +1

Name of the Vulnerable Software and Affected Versions: Windows Secure Socket Tunneling Protocol SSTP affected versions not specified Description: The issue is related to errors in synchronization when using a shared resource in the implementation of the Secure Socket Tunneling Protocol SSTP in...

PT-2022-4558 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in the Microsoft Windows operating system, specifically concerning errors in access control. This vulnerability can...

PT-2022-4278 · Microsoft · Windows Sstp +1

Name of the Vulnerable Software and Affected Versions: Windows Secure Socket Tunneling Protocol SSTP affected versions not specified Description: The issue is related to errors in synchronization when using a shared resource in the implementation of the Secure Socket Tunneling Protocol SSTP in th...

PT-2022-4124 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows Secure Socket Tunneling Protocol SSTP affected versions not specified Description: The issue is related to errors in synchronization when using a shared resource in the implementation of the Secure Socket Tunneling Protocol SSTP in th...

PT-2022-4422 · Microsoft · Azure Rtos Guix Studio

Name of the Vulnerable Software and Affected Versions: Azure RTOS GUIX Studio affected versions not specified Description: The issue is related to access control errors in the Azure RTOS GUIX Studio development environment, which can lead to information disclosure. An attacker could exploit this ...

PT-2022-4122 · Microsoft · Windows Sstp +1

Name of the Vulnerable Software and Affected Versions: Windows Secure Socket Tunneling Protocol SSTP affected versions not specified Description: The issue is related to errors in synchronization when using a shared resource in the implementation of the Secure Socket Tunneling Protocol SSTP in...

PT-2022-4088 · Microsoft · Windows Hyper-V +1

Name of the Vulnerable Software and Affected Versions: Windows Hyper-V affected versions not specified Description: The issue is caused by synchronization errors when using a shared resource in the Windows Hyper-V hardware virtualization system. It may allow an attacker to execute arbitrary code ...

PT-2022-4404 · Hewlett Packard · Hp Laptop Bios

Name of the Vulnerable Software and Affected Versions: HP PC products affected versions not specified Description: The issue is related to errors in synchronization when using a shared resource in the System Management Mode SMM implementation of the HP laptop BIOS firmware. This could allow an...

PT-2022-4128 · Microsoft · Visual Studio

Name of the Vulnerable Software and Affected Versions: Microsoft Visual Studio affected versions not specified Description: The issue is related to errors in handling input data in Microsoft Visual Studio. It allows a remote attacker to execute arbitrary code by tricking a user into running a...

CVE-2022-2398

The WordPress Comments Fields WordPress plugin before 4.1 does not escape Field Error Message, which could allow high-privileged users to perform Cross-Site Scripting attacks even when unfilteredhtml is disallowed...

NVIDIA GPU Display Driver DoS

The vulnerability of the NVIDIA GPU Display Driver’s kernel is related to pointer dereferencing errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

UBUNTU-CVE-2022-2500

A cross-site scripting issue has been discovered in GitLab CE/EE affecting all versions before 15.0.5, 15.1 prior to 15.1.4, and 15.2 prior to 15.2.1. A stored XSS flaw in job error messages allows attackers to perform arbitrary actions on behalf of victims at client side...

Cisco RV340 Router Code Execution

The vulnerability of the web-based management interface for Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN software lies in errors during the processing of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the root user or cause...

CLSA-2022-1659636773 Fix CVE(s): CVE-2022-2344, CVE-2022-2345, CVE-2022-2522, CVE-2022-2343

SECURITY UPDATE: Using freed memory with recursive substitute - debian/patches/CVE-2022-2345.patch: Always make a copy for regprevsub - CVE-2022-2345 SECURITY UPDATE: Reading past end of completion with duplicate match - debian/patches/CVE-2022-2344.patch: Check string length - CVE-2022-2344...

OKHttp Square Authentication Bypass Man-in-the-Middle

The vulnerability of the client’s HTTP library, OKHttp Square, is related to errors in the certificate authentication process. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions and execute a type of “man-in-the-middle” attack...

Dspace security vulnerabilities

Dspace is an open source turnkey repository application from the DuraSpace community. A security vulnerability exists in DSpace versions prior to 6.4, which stems from the fact that when an "internal system error" occurs in dspace-jspui, the entire exception including the stack trace is available...

Juniper Networks Packet Forwarding Engine Pointer Arithmetic DoS

The vulnerability of the Packet Forwarding Engine PFE module in Juniper Networks’ Junos OS-based routers of the QFX5000 Series and MX Series models is related to pointer arithmetic errors. Exploiting this vulnerability allows a malicious actor to trigger service failures remotely...

CENTUM CS Resource Management DoS

The vulnerability of distributed control systems such as CENTUM CS 3000, CENTUM CS 3000 Entry Class, CENTUM VP, and CENTUM VP Entry Class lies in resource management errors. Exploiting this vulnerability allows a malicious actor to cause service interruptions by sending specially crafted malware...

IBM DataPower Gateway code-related vulnerabilities

IBM DataPower Gateway is a set of security and integration platforms from IBM USA designed specifically for mobile, cloud, application programming interface API, web, service-oriented architecture SOA, B2B and cloud workloads. The platform protects, integrates and optimizes access across channels...

GSD-2022-1004380 ASoC: Intel: sof_sdw: handle errors on card registration

ASoC: Intel: sofsdw: handle errors on card registration This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.56 by commit...