PT-2022-36780 · Git +1 · Clamav

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type identified as Memcpy-param-overlap, with a crash state involving repeat and p ere. No further details are provided...

PT-2022-24709 · Zte · Zte Mf286R

Name of the Vulnerable Software and Affected Versions: ZTE MF286R affected versions not specified Description: The issue is related to a buffer overflow vulnerability due to lack of input validation on parameters of the wifi interface. An authenticated attacker could exploit this to perform a...

PT-2022-27133 · Tenda · Tenda Ac18

Name of the Vulnerable Software and Affected Versions: Tenda AC18 version 15.03.05.19 Description: The issue is related to a Buffer Overflow that can be triggered via the R7WebsSecurityHandler function. Recommendations: For Tenda AC18 version 15.03.05.19, at the moment, there is no information...

PT-2022-27282 · Trend Micro · Trend Micro Apex One +1

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex One affected versions not specified Trend Micro Apex One as a Service affected versions not specified Description: A security agent directory traversal issue could allow a local attacker to escalate privileges on affected...

PT-2022-10698 · Hewlett Packard · Hp Multifunction Printers +1

Name of the Vulnerable Software and Affected Versions: HP multifunction printers MFPs affected versions not specified Description: A potential security issue has been identified that may cause Denial of Service when running HP Workpath solutions on certain products. Recommendations: At the moment...

PT-2022-36777 · Git +1 · Opensc

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a stack-buffer-overflow read error. The crash state involves several functions: authentic get tagged data, authentic parse...

PT-2022-22379 · Carel · Carel Boss Mini

Name of the Vulnerable Software and Affected Versions: Carel Boss Mini version 1.5.0 Description: The issue is related to Improper Access Control. Recommendations: For Carel Boss Mini version 1.5.0, at the moment, there is no information about a newer version that contains a fix for this issue...

PT-2022-26495 · Google · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel Description: In the shared metadata init function of SharedMetadata.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileg...

PT-2022-23624 · D Link · D-Link G Integrated Access Device4

Name of the Vulnerable Software and Affected Versions: D-Link - G integrated Access Device4 affected versions not specified Description: The issue concerns information disclosure and authorization bypass. It involves a file containing a URL with a private IP address and default username value...

PT-2022-23623 · Elfsight · Elsight Halo

Name of the Vulnerable Software and Affected Versions: Elsight Halo affected versions not specified Description: The Elsight Halo web panel allows connection validation through a POST request to /api/v1/nics/wifi/wlan0/ping, which can be exploited by abusing the DESTINATION parameter to achieve...

PT-2022-21355

Name of the Vulnerable Software and Affected Versions Medtronic affected versions not specified Description A vulnerability exists that could allow an unauthorized user to learn aspects of the communication protocol used to pair system components while the pump is being paired with other system...

PT-2022-27069 · Unknown · Backclick Professional

Name of the Vulnerable Software and Affected Versions: BACKCLICK Professional version 5.9.63 Description: An issue was discovered due to an unsafe implementation of session tracking, making it possible for an attacker to trick users into opening an authenticated user session for a session...

PT-2022-25239 · Feehicms · Feehicms

Name of the Vulnerable Software and Affected Versions: FeehiCMS affected versions not specified Description: A problematic issue has been found in FeehiCMS, affecting some unknown functionality of the Post My Comment Tab component. This issue leads to cross-site request forgery and can be exploit...

PT-2022-16427

Name of the Vulnerable Software and Affected Versions Karmasis Informatics Infraskope SIEM+ affected versions not specified Description The issue allows an unauthenticated attacker to modify logs due to an unauthenticated access vulnerability. Recommendations At the moment, there is no informatio...

PT-2022-25231 · Unknown · Hospital Management Center

Name of the Vulnerable Software and Affected Versions: Hospital Management Center affected versions not specified Description: A problematic vulnerability was found in Hospital Management Center, affecting an unknown functionality of the file appointment.php. This vulnerability leads to cross-sit...

PT-2022-17455 · Qualcomm · Snapdragon Wearables +5

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon versions affected versions not specified Description: The issue is related to information disclosure in video due to a buffer over-read while parsing avi files. This affects various Qualcomm Snapdragon products, including...

PT-2022-17487 · Qualcomm · Qualcomm Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: The issue is related to memory corruption in graphics due to a use-after-free error while importing a graphics buffer. This problem affects various Qualcomm Snapdragon products,...

PT-2022-24980 · Bluespice · Bluespice

Name of the Vulnerable Software and Affected Versions: BlueSpice affected versions not specified Description: The issue allows a user with a regular account and edit permissions to inject arbitrary HTML into the personal menu navigation of their own and other users, enabling targeted attacks...

PT-2022-26836 · Xpdf +1 · Xpdf +1

Name of the Vulnerable Software and Affected Versions: XPDF version 4.04 Description: A stack overflow issue was discovered in the function FileStream::copy at xpdf/Stream.cc:795. This issue affects XPDF and can be exploited via the FileStream::copy function. Recommendations: For XPDF version 4.0...

PT-2022-25114 · Sourcecodester · Sourcecodester Sanitization Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Sanitization Management System affected versions not specified Description: A problematic vulnerability was found in the SourceCodester Sanitization Management System, affecting an unknown functionality of the file...