PT-2022-2720 · Microsoft · Windows Installer +1

Name of the Vulnerable Software and Affected Versions: Windows Installer affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows Installer component of Windows operating systems. It allows an attacker to potentially elevate their...

PT-2022-7111 · Yajl-Ruby +10 · Yajl-Ruby +10

Name of the Vulnerable Software and Affected Versions: yajl-ruby versions 1.x through 2.x Description: The issue is related to an integer overflow in the yajl-ruby library, which leads to heap memory corruption when dealing with large inputs 2GB. The reallocation logic at yajl buf.cL64 may result...

PT-2022-2074 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to incorrect code generation management in the browser. It can be exploited by a remote attacker using a specially crafted web page to elevate the...

PT-2022-8927 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw was found in the Linux kernel's implementation of audit rules, where a syscall can unexpectedly not be correctly logged by the audit subsystem. Recommendations: At the moment,...

PT-2025-7996 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.17.0-rc8+ Description: A vulnerability in the Linux kernel has been resolved, related to the btrfs filesystem. The issue occurs when the btrfs get blocks direct write function reserves temporary outstanding...

PT-2022-10456 · Solarwinds · Web Help Desk

Name of the Vulnerable Software and Affected Versions: WebHelpDesk affected versions not specified Description: The issue is related to an input that was not sanitized in WebHelpDesk. SolarWinds has removed this input field to prevent its misuse. Recommendations: At the moment, there is no...

PT-2022-1884 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery affected versions not specified Description: The issue is related to insufficient protection of registration data in Azure Site Recovery, which can be exploited by a remote attacker to elevate their privileges...

PT-2022-1886 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery affected versions not specified Description: The issue is related to insufficient protection of registration data, which can be exploited by a remote attacker to elevate their privileges. Recommendations: At the moment,...

GSD-2022-1000504 kasan: test: fix compatibility with FORTIFY_SOURCE

kasan: test: fix compatibility with FORTIFYSOURCE This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.10 by commit...

PT-2022-16121 · Envoy · Envoy

Name of the Vulnerable Software and Affected Versions: Envoy affected versions not specified Description: Envoy is an open source edge and service proxy, designed for cloud-native applications. When a cluster is deleted via Cluster Discovery Service CDS, all idle connections established to...

Security Bulletin: Security vulnerability in WebSphere Application Server shipped with Predictive Maintenance and Quality and Predictive Maintenance Insights On-Premises (CVE-2021-38951)

Summary IBM WebSphere Application Server is shipped with IBM Predictive Maintenance and Quality and Predictive Maintenance Insights On-Premises. WebSphere Application Server is vulnerable to a denial of service. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes...

PT-2022-7628 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The vulnerability is related to the btrfs filesystem in the Linux kernel. When using the flushoncommit mount option, a warning is triggered during almost every transaction commit due t...

PT-2022-15512 · Sap · S/4Hana

Name of the Vulnerable Software and Affected Versions: S/4HANA affected versions not specified Description: The issue concerns the exposure of private address and bank details of an Employee Business Partner with Supplier Role through the S/4HANA Supplier Factsheet, as well as the exposure of...

PT-2022-1713 · Microsoft · Windows Print Spooler +1

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Print Spooler affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in the Windows Print Spooler. This vulnerability is associated with insecure privilege management,...

PT-2022-2928 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient access control in the Win32k component of the Microsoft Windows operating system. This can be exploited to elevate privileges. There is no information...

PT-2022-1856 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery affected versions not specified Description: The issue is related to incorrect code generation management in Azure Site Recovery, allowing a remote attacker to execute arbitrary code. Recommendations: At the moment, there ...

PT-2022-1942 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery affected versions not specified Description: The issue is related to incorrect code generation management. It may allow a remote attacker to execute arbitrary code. Recommendations: At the moment, there is no information...

PYSEC-2022-121

Tensorflow is an Open Source Machine Learning Framework. An attacker can craft a TFLite model that would trigger a division by zero in BiasAndClamp implementation. There is no check that the biassize is non zero. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on...

PYSEC-2022-150

Tensorflow is an Open Source Machine Learning Framework. A malicious user can cause a denial of service by altering a SavedModel such that assertions in function.cc would be falsified and crash the Python interpreter. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this comm...

CVE-2022-23574

Tensorflow is an Open Source Machine Learning Framework. There is a typo in TensorFlow's SpecializeType which results in heap OOB read/write. Due to a typo, arg is initialized to the ith mutable argument in a loop where the loop index is j. Hence it is possible to assign to arg from outside the...