PT-2022-3269 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to insufficient input validation in Microsoft Edge. It may allow a remote attacker to execute arbitrary code with elevated privileges...

PT-2022-7528 · Gnutls +7 · Gnutls +7

Name of the Vulnerable Software and Affected Versions: Samba affected versions not specified Description: The issue is related to the function gnutls rnd in the GnuTLS package used by Samba, which generates insufficiently random values. This can potentially allow an attacker to gain access to...

PT-2022-12292 · Asg · Asg-Zena Cross Platform Server Enterprise Edition

Name of the Vulnerable Software and Affected Versions: ASG-Zena Cross Platform Server Enterprise Edition version 4.2.1 Description: The issue is related to Cross Site Scripting XSS. No information is provided about the estimated number of potentially affected devices worldwide or real-world...

PT-2022-10419 · Qualcomm · Qualcomm Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: The issue is related to a possible buffer over read due to improper calculation of string length while parsing Id3 tags. This affects various Qualcomm Snapdragon products,...

PT-2022-4240 · Pki-Core +8 · Pki-Core +8

Name of the Vulnerable Software and Affected Versions: pki-core versions affected versions not specified Description: The issue is related to the incorrect restriction of XML external entities, which can lead to XML external entity XXE attacks. A remote attacker can potentially retrieve the conte...

PT-2022-3407 · Xen +1 · Xen +1

Name of the Vulnerable Software and Affected Versions: Xen affected versions not specified Description: The issue is related to a buffer overflow in memory, which can allow an attacker to execute arbitrary code. Xen's safety logic does not account for CPU-induced cache non-coherency, leading to...

PT-2022-3232 · Huawei · Huawei Terminal Printer

Name of the Vulnerable Software and Affected Versions: Huawei terminal printer product affected versions not specified Description: The issue is related to a command injection vulnerability in the Huawei terminal printer product. If successfully exploited, it could result in obtaining the highest...

PT-2022-11714 · Mini-Xml · Mini-Xml

Name of the Vulnerable Software and Affected Versions: Mini-XML version 3.2 Description: A memory leak issue was discovered that could cause a denial of service. Testing reports are inconsistent, with some testers seeing the issue in the 3.2 release, while others did not see the issue in this...

PT-2022-19145 · Linux Mint +1 · Linuxmint +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue allows users to create arbitrary TCP DBus connections through the is closing session function. This could potentially lead to unauthorized...

PT-2022-15300 · Huawei · Hwlog

Name of the Vulnerable Software and Affected Versions: Huawei HWLog affected versions not specified Description: The DFX module has a Use-After-Free UAF vulnerability. Successful exploitation of this vulnerability may affect system stability. Recommendations: At the moment, there is no informatio...

PT-2022-10688 · Hewlett Packard · Hp Pc

Name of the Vulnerable Software and Affected Versions: HP PC products affected versions not specified Description: Potential security vulnerabilities have been identified in the BIOS UEFI Firmware for certain HP PC products, which might allow arbitrary code execution. HP is releasing firmware...

PT-2022-10687 · Hewlett Packard · Hp Pc

Name of the Vulnerable Software and Affected Versions: HP PC products affected versions not specified Description: The issue concerns potential security vulnerabilities in the BIOS UEFI Firmware of certain HP PC products. These vulnerabilities might allow arbitrary code execution. HP is releasing...

PT-2022-2459

Name of the Vulnerable Software and Affected Versions Windows Address Book affected versions not specified Description The issue exists due to insufficient input validation in the Windows Address Book, allowing remote attackers to execute arbitrary code and affect the system. Recommendations At t...

CVE-2022-23705

A security vulnerability has been identified in HPE Nimble Storage Hybrid Flash Arrays, HPE Nimble Storage All Flash Arrays, and HPE Nimble Storage Secondary Flash Arrays which could potentially allow the upload, but not execution, of unauthorized update binaries to the array. HPE has made the...

PT-2022-7239 · Jxpath · Jxpath

Name of the Vulnerable Software and Affected Versions: JXPath affected versions not specified Description: The issue is related to a buffer overflow in the JXPath library, which can be exploited by a remote attacker to cause a denial of service. If the parser is running on user-supplied input, an...

CVE-2022-24883 FreeRDP Server authentication might allow invalid credentials to pass

FreeRDP is a free implementation of the Remote Desktop Protocol RDP. Prior to version 2.7.0, server side authentication against a SAM file might be successful for invalid credentials if the server has configured an invalid SAM file path. FreeRDP based clients are not affected. RDP server...

PT-2022-11242 · Swift Sensors · Swift Sensors Gateway Sg3-1010

Name of the Vulnerable Software and Affected Versions: Swift Sensors Gateway SG3-1010 affected versions not specified Description: The issue concerns an authentication bypass vulnerability in the device password generation functionality. It can be exploited through a specially-crafted network...

PT-2022-6708 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to insufficient access controls in Microsoft Edge, allowing a remote attacker to bypass security restrictions, elevate privileges, or execute...

PT-2022-2941 · Microsoft · Windows Print Spooler +1

Name of the Vulnerable Software and Affected Versions: Windows Print Spooler affected versions not specified Description: The issue is related to insecure privilege management in the Windows Print Spooler. It allows an attacker to elevate their privileges. Recommendations: At the moment, there is...

PT-2022-2898 · Microsoft · Windows Print Spooler +1

Name of the Vulnerable Software and Affected Versions: Windows Print Spooler affected versions not specified Description: The issue is related to insecure privilege management in the Windows Print Spooler. It allows an attacker to elevate their privileges, potentially affecting the system. No...