6232 matches found
PT-2022-8128 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The provided information does not contain details about a specific vulnerability. It appears to be a notification about a rejected candidate number from the National...
PT-2022-8772 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The provided information does not contain details about a specific vulnerability. It appears to be a notification about a rejected candidate number from the National...
PT-2022-8112 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The provided information does not contain details about a specific vulnerability. It appears to be a rejection notice for a candidate number from the National Vulnerability...
PT-2022-5762 · Google +1 · Google Chrome +1
Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to insufficient access control in Microsoft Edge and Google Chrome browsers. Exploitation of this issue may allow a remote attacker to elevate the...
PT-2022-25798 · Ibm · Ibm Db2
Name of the Vulnerable Software and Affected Versions: IBM Db2U versions 3.5 through 4.5 Description: The issue allows an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts due to cross-site request forgery. Recommendations: For IBM Db2U version...
PT-2022-27117 · Unknown · Zenario Cms
Name of the Vulnerable Software and Affected Versions: Zenario CMS version 9.3.57186 Description: The issue concerns Remote Code Execution RCE, which allows an attacker to execute arbitrary code on the affected system. Recommendations: For Zenario CMS version 9.3.57186, at the moment, there is no...
PT-2022-36796 · Git +1 · Ghostscript
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-use-after-free error, which occurs when the program attempts to access memory that has already been freed. The crash state...
PT-2022-26315 · Sourcecodester · Sourcecodester Canteen Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Canteen Management System affected versions not specified Description: A critical issue affects the function query of the file ajax invoice.php of the component POST Request Handler. The manipulation of the argument search lead...
PT-2022-25653 · Lepton · Lepton
Name of the Vulnerable Software and Affected Versions: Lepton affected versions not specified Description: A loop with an unreachable exit condition can be triggered by passing a crafted JPEG file to the Lepton image compression tool, resulting in a denial-of-service. Recommendations: At the...
PT-2022-36795 · Mbed Tls · Mbed Tls
Name of the Vulnerable Software and Affected Versions: mbedtls affected versions not specified Description: A heap-use-after-free issue occurs in the mbedtls pkcs7 free function, which is called by mbedtls pkcs7 parse der. This issue is identified by a crash report. Recommendations: At the moment...
PT-2022-27167 · Dinstar · Dinstar Dag2000-16O
Name of the Vulnerable Software and Affected Versions: Dinstar FXO Analog VoIP Gateway DAG2000-16O affected versions not specified Description: The issue is related to Cross Site Scripting XSS. No information is provided about the estimated number of potentially affected devices worldwide or...
PT-2022-36794 · Git +1 · Hamcrest
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A security exception crash was reported, involving the com.code intelligence.jazzer.sanitizers.RegexInjection class and its methods hookInternal and...
PyTorch vulnerable to arbitrary code execution
In PyTorch before trunk/89695, torch.jit.annotations.parsetypeline can cause arbitrary code execution because eval is used unsafely. The fix for this issue is available in version 1.13.1. There is a release checker in issue 89855...
PT-2022-36793 · Git +1 · Ghostscript
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A crash has been reported with a type of UNKNOWN READ. The crash state includes functions such as chunk free object, ngx final DeviceN, and gs cspace...
PT-2024-11883 · Linux +4 · Linux Kernel +4
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A buffer overflow issue has been resolved in the Linux kernel, specifically in the wifi: cfg80211 component. The problem arises from an assumption that 5 octets are present for vendor...
PT-2022-36789 · Git +1 · Harfbuzz
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read error. Technical details about the crash include the next function in OT::hb ot apply context...
PT-2022-6455 · Foxit · Foxit Pdf Reader
Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this issue, where the target mus...
PT-2022-36779 · Git +1 · Ghostscript
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read crash. Technical details include the crash type and state, which involve functions such as sputs, ngx...
PT-2022-24209 · Solarwinds · Solarwinds Sem +1
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue concerns an insecure method vulnerability where allowed HTTP methods are disclosed, including OPTIONS, DELETE, TRACE, and PUT. Recommendations: At the moment, there is no...
PT-2022-6575 · NetGear · Netgear Rax30
Name of the Vulnerable Software and Affected Versions: NETGEAR RAX30 affected versions not specified Description: The issue is related to the handling of JSON data and results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based...