PT-2022-8359 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue. It appears to be a notification about a candidate number that is not in use...

PT-2022-7675 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a buffer overflow in the FASTFAT component of the Windows operating system. This could allow an attacker to read data from remote files on the operating system by...

PT-2022-6525 · Tp Link · Tp-Link Archer Ax21

Name of the Vulnerable Software and Affected Versions: TP-Link Archer AX21 AX1800 affected versions not specified Description: The issue is related to a buffer overflow vulnerability in the TP-Link AX1800 router's firmware, allowing remote attackers to execute arbitrary code on affected...

PT-2022-27516 · Dahua · Dahua

Name of the Vulnerable Software and Affected Versions: Dahua software products affected versions not specified Description: The issue allows for unauthenticated and un-throttled ICMP requests on a remote DSS Server. An attacker can bypass the firewall access control policy by sending a crafted...

PT-2022-27512 · Dahua · Dahua

Name of the Vulnerable Software and Affected Versions: Dahua software products affected versions not specified Description: The issue allows an attacker to enable or disable the SSHD service without authentication. This can be achieved by sending a crafted packet to the vulnerable interface after...

PT-2022-27701 · H3C · H3C Firewall

Name of the Vulnerable Software and Affected Versions: h3c firewall versions = 3.10 ESS6703 Description: The issue is related to a privilege bypass. Recommendations: For h3c firewall versions = 3.10 ESS6703, at the moment, there is no information about a newer version that contains a fix for this...

PT-2022-7216 · Ivanti · Ivanti Avalanche Smart Device Service

Name of the Vulnerable Software and Affected Versions: Ivanti Avalanche Smart Device Service affected versions not specified Description: The issue is related to a lack of authentication procedure for a critical function in the Smart Device Service of the Ivanti Avalanche system. Exploitation of...

PT-2022-6580 · D Link · D-Link Dir-2640

Name of the Vulnerable Software and Affected Versions: D-Link DIR-2640 routers affected versions not specified Description: The issue is related to the implementation of the HNAP1 protocol in the D-Link DIR-2640-US router's firmware, specifically with insufficient validation of user-supplied inpu...

PT-2022-37429 · Unknown · Embedded-Alloc

Name of the Vulnerable Software and Affected Versions: embedded-alloc affected versions not specified Description: The crate has been renamed from alloc-cortex-m to embedded-alloc. The new repository location is provided. Recommendations: At the moment, there is no information about a newer versi...

PT-2022-6581 · D Link · D-Link Dir-2640

Name of the Vulnerable Software and Affected Versions: D-Link DIR-2640 versions affected versions not specified Description: This issue allows network-adjacent attackers to bypass authentication on affected D-Link DIR-2640 routers. The flaw exists within the web management interface, which listen...

PT-2022-6465 · Rittal · Rittal Cmc Pu Iii

Name of the Vulnerable Software and Affected Versions: Rittal CMC III affected versions not specified Description: The issue is related to inadequate access control in the Rittal CMC III central control unit, which can be exploited by an attacker to gain unauthorized access to protected informati...

PT-2022-27643 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about a specific vulnerability. It appears to be a notification about a candidate number that...

PT-2022-27810 · Unknown · Haware Module

Name of the Vulnerable Software and Affected Versions: HAware module affected versions not specified Description: The issue is related to a function logic error in the HAware module. This error affects the account removal function in Settings. Successful exploitation of this issue will have an...

PT-2022-27815 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: Some smartphones affected versions not specified Description: The issue is related to an out-of-bounds write vulnerability. Successful exploitation of this issue may cause system service exceptions. Recommendations: At the moment, there is no...

PT-2022-36815 · Git +1 · Wabt

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: A null-dereference read crash was reported, indicating a potential issue where the software attempts to access a null pointer, leading to a crash. The crash state is NULL, suggesting th...

PT-2022-27802 · Unknown · Sectelephonyprovider

Name of the Vulnerable Software and Affected Versions: TelephonyProvider affected versions not specified Description: The issue concerns a problem in the TelephonyProvider module related to obtaining values, which could impact data confidentiality upon successful exploitation. Recommendations: At...

PT-2022-27819 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: Some smartphones affected versions not specified Description: The issue is related to an out-of-bounds write vulnerability. Successful exploitation of this issue may cause system service exceptions. Recommendations: At the moment, there is no...

PT-2022-27809 · Unknown · Power Consumption Module

Name of the Vulnerable Software and Affected Versions: Power consumption module affected versions not specified Description: The power consumption module has an out-of-bounds read issue. Successful exploitation of this issue may affect system availability. Recommendations: At the moment, there is...

PT-2022-27222 · Unknown · Conprosys Hmi System

Name of the Vulnerable Software and Affected Versions: CONPROSYS HMI System CHS versions 3.4.4 and earlier Description: The issue allows a remote unauthenticated attacker to execute an arbitrary OS command on the server where the product is running by sending a specially crafted request...

PT-2022-26202 · Unknown · Denshi Nyusatsu Core System

Name of the Vulnerable Software and Affected Versions: DENSHI NYUSATSU CORE SYSTEM versions v6 R4 and earlier Description: A cross-site scripting issue allows a remote unauthenticated attacker to inject an arbitrary script. Recommendations: For DENSHI NYUSATSU CORE SYSTEM versions v6 R4 and...