PT-2022-35046 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 3.19 through 6.0.2 Description: The issue is related to a buffer overflow in debugfs. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions 3.19 through 6.0.2,...

PT-2022-35183 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.2 Description: The issue is related to the scsi: stex component, where the passthrough command structure is not properly zeroed out. This is an automated ID intended to aid in discovery of potential securit...

PT-2022-35176 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.2 Description: The issue is related to the pci endpoint test function in the Linux Kernel, which may cause a panic when using pci endpoint test copy,write,read. The actual impact and attack plausibility hav...

PT-2022-12943 · Unknown · Drm Module

Name of the Vulnerable Software and Affected Versions: DRM module affected versions not specified Description: The issue is related to a problem in the DRM module's verification of secure memory attributes. This could potentially lead to abnormal video playback if exploited. Recommendations: At t...

PT-2022-10356 · Wago · Wago I/O-Check Service

Name of the Vulnerable Software and Affected Versions: WAGO I/O-Check Service affected versions not specified Description: The issue allows an attacker to send a specially crafted packet containing OS commands to crash the diagnostic tool and write memory. Recommendations: At the moment, there is...

PT-2022-18465 · Citrix · Access Gateway +3

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The issue concerns a bypass of the user login brute force protection functionality. Recommendations: At the moment, there is no information about a newer version that contains a fix for...

PT-2022-5439 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient access control in the Windows Overlay Filter component, which can be exploited to elevate privileges. This allows an attacker to affect the system. No...

PT-2022-37527 · Vsftpd · Vsftpd

Name of the Vulnerable Software and Affected Versions: vsftpd affected versions not specified Description: The issue concerns the removal of unsupported systemd hardening options. No information is provided about the estimated number of potentially affected devices or real-world incidents where...

PT-2022-36751 · Git +1 · Quickjs

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read error. Technical details about the crash include the crash type being a heap-buffer-overflow read 4,...

PT-2022-36752 · Git +1 · Mongoose

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow read issue was identified, potentially causing a crash. The crash occurred in the mg mqtt parse function, as indicated by the cras...

PT-2022-10374 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software specified. Description: The issue was investigated and found not to be a vulnerability. It was withdrawn from consideration. Recommendations: At the moment, there is no information about a newer version that contains a...

PT-2022-36739 · Git +1 · C-Blosc2

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow read issue is reported, with a crash type indicating a Heap-buffer-overflow READ 1. The crash state involves functions such as ndl...

PT-2022-16787 · Forgerock · Access Management

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: It may be possible to gain some details of the deployment through a well-crafted attack, allowing the data to be used to probe internal network services. Recommendations: At the...

PT-2022-21485 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: An out-of-bounds read issue was addressed through improved input validation. There is no information available about the estimated number of potentially...

PT-2022-36705 · Git +1 · Radare2

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 1 crash has been reported. The crash involves the functions parse classes 64, classes, and r bin object set items. No...

PT-2022-36697 · Libxml2 · Libxml2

Name of the Vulnerable Software and Affected Versions: libxml2 affected versions not specified Description: The issue is related to a heap-use-after-free error. Technical details about the crash include the xmlXIncludeCopyXPointer, xmlXIncludeDoProcess, and xmlXIncludeProcessTreeFlagsData...

PT-2022-36686 · Git +1 · Hunspell

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read, which occurs in the AffixMgr::cpdpat check, AffixMgr::compound check, and SuggestMgr::checkword...

PT-2022-24531 · Unisoc (Shanghai) Technologies Co. +1 · Sc9863A/Sc9832E/Sc7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a camera driver, where improper locking can cause memory corruption. This could lead to a local denial of service in the kernel...

PT-2022-36677 · Git +1 · Mapserver

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow WRITE 1 crash has been reported. The crash state includes function calls to msyylex, loadLayer, and loadMapInternal. No informatio...

PT-2022-5964 · Microsoft · 365 Apps For Enterprise +2

Name of the Vulnerable Software and Affected Versions: Microsoft Word affected versions not specified Description: The issue is related to insufficient input validation in Microsoft Office and Microsoft 365 Apps for Enterprise packages. This can allow an attacker to execute arbitrary code...