PT-2022-36727 · Oracle · Java

Name of the Vulnerable Software and Affected Versions: Java affected versions not specified Description: A security exception occurs due to a crash in the Double.parseDouble function, which is called by FloatingDecimal.readJavaFormatString and FloatingDecimal.parseDouble. Recommendations: At the...

PT-2022-36723 · Git +1 · Wireshark

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read crash. The crash state involves several functions, including expert set info vformat, expert add info...

PT-2022-27085 · Pwndoc · Pwndoc

Name of the Vulnerable Software and Affected Versions: PwnDoc versions 0.5.3 and earlier Description: The issue allows remote attackers to identify disabled user account names by leveraging response messages for authentication attempts. Recommendations: For PwnDoc versions 0.5.3 and earlier, at t...

PT-2022-36719 · Git +1 · Ruby

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A crash has been reported due to a use-after-poison READ 1 error. The issue was identified through an OSS-Fuzz report. No information is available about...

PT-2022-36718 · Libraw · Libraw

Name of the Vulnerable Software and Affected Versions: LibRaw affected versions not specified Description: The issue is related to a heap buffer overflow, which occurs when writing data. The crash is associated with the kodak rgb load raw, kodak thumb loader, and unpack thumb functions in LibRaw...

PT-2022-36724 · Git +1 · Wireshark

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ crash occurred, involving the functions wmem strbuf append vprintf and wmem strbuf append printf, which are called by dissect...

PT-2022-23929 · Unknown · Sourcecodester Web-Based Student Clearance System

Name of the Vulnerable Software and Affected Versions: SourceCodester Web-Based Student Clearance System affected versions not specified Description: A critical issue has been discovered, affecting an unknown part of the file Admin/edit-admin.php. The manipulation of the id argument leads to SQL...

PT-2022-5284 · Drools +1 · Drools +1

Name of the Vulnerable Software and Affected Versions: Drools affected versions not specified Description: A flaw was found in Drools core where some utility classes did not use proper safeguards when deserializing data. This allows an authenticated attacker to construct malicious serialized...

PT-2022-6953 · Cisco · Cisco Ios Xr

Name of the Vulnerable Software and Affected Versions: Cisco IOS XR Software affected versions not specified Description: A vulnerability in the access control list ACL processing on MPLS interfaces in the ingress direction of Cisco IOS XR Software could allow an unauthenticated, remote attacker ...

PT-2022-24549 · Rockwell Automation · Rockwell Automation Factorytalk Alarm/Events Service

Name of the Vulnerable Software and Affected Versions: Rockwell Automation FactoryTalk Alarm and Events service affected versions not specified Description: The issue allows an unauthenticated attacker with network access to cause the Rockwell Automation FactoryTalk Alarm and Events service to...

PT-2022-36711 · Git +1 · Openexr

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read, as indicated by an OSS-Fuzz report. The crash state involves several functions: fasthuf initialize,...

PT-2022-23531 · Axiomatic · Axiomatic Bento4

Name of the Vulnerable Software and Affected Versions: Axiomatic Bento4 affected versions not specified Description: A critical issue has been found in Axiomatic Bento4, affecting the AP4 LinearReader::Advance function of the Ap4LinearReader.cpp file in the mp42ts component. This issue leads to u...

PT-2022-37525 · Suse · Container-Suseconnect

Name of the Vulnerable Software and Affected Versions: container-suseconnect affected versions not specified Description: The issue concerns a rebuild of the previous sources against the current security updated go compiler. No specific details about the issue, affected devices, or real-world...

PT-2022-23566 · Axiomatic · Bento4

Name of the Vulnerable Software and Affected Versions: Axiomatic Bento4 affected versions not specified Description: A critical issue has been found, classified as a heap-based buffer overflow. This occurs in the WriteSample function of the mp42hevc component. The issue can be exploited remotely...

PT-2022-36706 · Git +1 · Gstreamer

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 1 crash has been reported. The crash involves the functions parse subrip, parse webvtt, and gst sub parse chain...

PT-2022-24276 · Esri · Esri Arcgis Server

Name of the Vulnerable Software and Affected Versions: Esri ArcGIS Server affected versions not specified Description: A remote file download issue can occur in some capabilities of Esri ArcGIS Server web services, potentially allowing a remote, unauthenticated attacker to induce an unsuspecting...

PT-2022-36699 · Libraw · Libraw

Name of the Vulnerable Software and Affected Versions: LibRaw affected versions not specified Description: The issue is related to a heap buffer overflow error. Technical details indicate that the crash occurs in the LibRaw buffer datastream::read function, which is called by LibRaw::read shorts...

PT-2022-36698 · Git +1 · Pillow

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type identified as Invalid-free. The crash state involves deallocation and reference counting, specifically in the deallo...

PT-2022-26662 · Autodesk · Autodesk Design Review

Name of the Vulnerable Software and Affected Versions: Autodesk DesignReview versions affected versions not specified Description: A maliciously crafted .dwf or .pct file consumed through the DesignReview.exe application could lead to a memory corruption issue due to a write access violation. Thi...

CVE-2022-3626

LibTIFF 4.4.0 has an out-of-bounds write in TIFFmemset in libtiff/tifunix.c:340 when called from processCropSelections, tools/tiffcrop.c:7619, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit...