PT-2022-5528 · Cisco · Cisco Email Security Appliance +1

Name of the Vulnerable Software and Affected Versions: Cisco Email Security Appliance ESA affected versions not specified Description: A vulnerability in Cisco AsyncOS Software for Cisco Email Security Appliance ESA could allow an unauthenticated remote attacker to cause a denial of service DoS...

PT-2023-22485 · Unknown +4 · Llvm-Project +4

Name of the Vulnerable Software and Affected Versions: llvm-project affected versions not specified Description: A segmentation fault was discovered in the llvm-project via the component mlir::IROperandmlir::OpOperand. Recommendations: At the moment, there is no information about a newer version...

PT-2022-36734 · Rawspeed · Rawspeed

Name of the Vulnerable Software and Affected Versions: rawspeed affected versions not specified Description: A heap buffer overflow read issue has been identified. The crash occurs in the applyOP function of DngOpcodes::PixelOpcode when handling metadata in DngDecoder. Technical details include t...

PT-2022-5477 · Cisco · Cisco Broadworks Commpilot

Name of the Vulnerable Software and Affected Versions: Cisco BroadWorks CommPilot Application Software affected versions not specified Description: A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot application could allow an authenticated, remote attacker to...

PT-2022-24214 · Axiomatic · Axiomatic Bento4

Name of the Vulnerable Software and Affected Versions: Axiomatic Bento4 affected versions not specified Description: A memory leak issue was found in Axiomatic Bento4, specifically affecting the AP4 ContainerAtom::AP4 ContainerAtom function of the mp4encrypt component. This issue can be exploited...

PT-2022-24201 · Axiomatic · Bento4

Name of the Vulnerable Software and Affected Versions: Axiomatic Bento4 affected versions not specified Description: A problematic issue has been found, affecting the AP4 File::AP4 File function of the Mp42Hevc.cpp file in the mp42hevc component. This issue leads to denial of service and can be...

PT-2022-9033 · Hcl +1 · Hcl Verse For Android +1

Name of the Vulnerable Software and Affected Versions: Application affected versions not specified Description: The application was signed using a key length less than or equal to 1024 bits, making it potentially vulnerable to forged digital signatures. An attacker could forge the same digital...

PT-2022-7158 · Parallels · Parallels Desktop

Name of the Vulnerable Software and Affected Versions: Parallels Desktop affected versions not specified Description: The issue is related to the Updater service of Parallels Desktop, where a Time-Of-Check Time-Of-Use flaw allows local attackers to escalate privileges on affected installations. A...

PT-2022-24247 · Axiomatic · Axiomatic Bento4

Name of the Vulnerable Software and Affected Versions: Axiomatic Bento4 affected versions not specified Description: A memory leak issue was found in the mp4decrypt component of Axiomatic Bento4. This issue can be exploited remotely. The exploit has been disclosed to the public. Recommendations: ...

PT-2022-24190 · Unknown · Webfactory Under Construction Plugin

Name of the Vulnerable Software and Affected Versions: WebFactory Under Construction Plugin affected versions not specified Description: A problematic vulnerability has been found in the WebFactory Under Construction Plugin, affecting the Plugin Setting Handler component. This issue leads to...

PT-2022-22474 · Tenable · Nessus

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue allows an authenticated attacker to potentially disclose agent logs and data due to the use of identical agent and cluster node linking keys. Recommendations: At the momen...

PT-2022-25504 · Unknown · Mail Sqr Expert System

Name of the Vulnerable Software and Affected Versions: Mail SQR Expert system affected versions not specified Description: The issue allows an unauthenticated remote attacker to execute arbitrary PHP files with a .asp file extension under specific system paths. This can lead to accessing and...

PT-2022-36732 · Libraw · Libraw

Name of the Vulnerable Software and Affected Versions: LibRaw affected versions not specified Description: The issue is related to a heap-buffer-overflow read error. Technical details about the crash include the LibRaw::phase one correct, LibRaw::raw2image ex, and LibRaw::dcraw process functions...

PT-2022-25332 · Php Point Of Sale Llc +1 · Php Point Of Sale

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned, so: Application affected versions not specified Description: The application is susceptible to Server-Side Request Forgery attacks. This allows the backend server to interact with unexpected...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2022:10180-1 Rating: important References: 1204732 1204819 Cross-References: CVE-2022-3652 CVE-2022-3653 CVE-2022-3654 CVE-2022-3655 CVE-2022-3656 CVE-2022-3657 CVE-2022-3658 CVE-2022-3659 CVE-2022-3660...

PT-2022-36731 · Git +1 · Ghostscript

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type identified as Global-buffer-overflow READ 8. The crash state involves several functions, including get unpack proc,...

PT-2022-11207 · Xfig · Xfig

Name of the Vulnerable Software and Affected Versions: xfig version 3.2.7 Description: The issue is related to a Buffer Overflow. Recommendations: For xfig version 3.2.7, at the moment, there is no information about a newer version that contains a fix for this issue...

PT-2022-36730 · Git +1 · Libxml2

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-use-after-free error, which occurs when the program attempts to access memory that has already been freed. The crash state...

PT-2022-24677 · U-Office · U-Office

Name of the Vulnerable Software and Affected Versions: U-Office affected versions not specified Description: The U-Office Force login function has an issue that allows an unauthenticated remote attacker to redirect users to an arbitrary website. Recommendations: At the moment, there is no...

PT-2022-9869 · Hcl · Hcl Launch Container

Name of the Vulnerable Software and Affected Versions: HCL Launch Container images affected versions not specified Description: The issue concerns non-unique HTTPS certificates and a database encryption key in the provided HCL Launch Container images. A fix is available, which includes directions...