PT-2022-36695 · Oracle · Java.Base

Name of the Vulnerable Software and Affected Versions: java.base affected versions not specified Description: A security exception crash has been reported. The crash occurs in the jaz.Zer class during the initialization process, specifically in the java.lang.Class.forName0 and...

CVE-2022-3599

LibTIFF 4.4.0 has an out-of-bounds read in writeSingleSection in tools/tiffcrop.c:7345, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit e8131125...

CVE-2022-3597

LibTIFF 4.4.0 has an out-of-bounds write in TIFFmemcpy in libtiff/tifunix.c:346 when called from extractImageSection, tools/tiffcrop.c:6826, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit...

PT-2022-26321 · Tenda · Tenda 11N

Name of the Vulnerable Software and Affected Versions: Tenda 11N version V5.07.33 cn Description: The issue is related to an Authentication Bypass. Recommendations: For Tenda 11N version V5.07.33 cn, at the moment, there is no information about a newer version that contains a fix for this...

PT-2022-36694 · Curl · Curl

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a stack buffer overflow error, as indicated by the crash type. The crash state involves functions such as Curl output aws sigv4,...

PT-2022-17479 · Qualcomm · Snapdragon Connectivity +8

Name of the Vulnerable Software and Affected Versions: Snapdragon Auto affected versions not specified Snapdragon Compute affected versions not specified Snapdragon Connectivity affected versions not specified Snapdragon Consumer Electronics Connectivity affected versions not specified Snapdragon...

PT-2022-25542 · Ocomon · Ocomon

Name of the Vulnerable Software and Affected Versions: OcoMon version 4.0RC1 Description: The issue is related to Incorrect Access Control. Through a request, a user can obtain the real email, and by sending the same request with the correct email, it is possible to perform an account takeover...

PT-2022-17463 · Qualcomm · Qualcomm Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: The issue is related to memory corruption in video due to a buffer overflow that occurs while parsing ASF clips. This problem affects various Qualcomm Snapdragon products,...

PT-2022-17476 · Qualcomm · Qualcomm Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: A cryptographic issue exists in the WLAN due to an improper check on the return value during the authentication handshake. This issue affects various Qualcomm Snapdragon product...

PT-2022-17477 · Qualcomm · Snapdragon Connectivity +9

Name of the Vulnerable Software and Affected Versions: Snapdragon Auto affected versions not specified Snapdragon Connectivity affected versions not specified Snapdragon Consumer Electronics Connectivity affected versions not specified Snapdragon Consumer IOT affected versions not specified...

PT-2022-5343 · Cisco · Cisco Roomos +1

Name of the Vulnerable Software and Affected Versions: Cisco TelePresence Collaboration Endpoint CE Software affected versions not specified Cisco RoomOS Software affected versions not specified Description: The issue is related to multiple vulnerabilities in the software, including a command-lin...

PT-2022-5341 · Cisco · Cisco Roomos +1

Name of the Vulnerable Software and Affected Versions: Cisco TelePresence Collaboration Endpoint CE Software affected versions not specified Cisco RoomOS Software affected versions not specified Description: The issue is related to incorrect directory path restriction in the xAPI component of the...

PT-2022-25606 · Bento4 · Bento4

Name of the Vulnerable Software and Affected Versions: Bento4 version 1.6.0 Description: The issue is related to memory leaks in Bento4 via the mp4fragment. Recommendations: For Bento4 version 1.6.0, at the moment, there is no information about a newer version that contains a fix for this...

PT-2022-14984 · Oracle · Oracle Business Intelligence Enterprise Edition

Name of the Vulnerable Software and Affected Versions: Oracle Business Intelligence Enterprise Edition version 5.9.0.0 Description: The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition, requiring human interaction fr...

PT-2022-21747 · Qualcomm · Snapdragon Auto

Name of the Vulnerable Software and Affected Versions: Snapdragon Auto affected versions not specified Description: The issue is related to memory corruption in automotive multimedia systems. It occurs due to the use of an out-of-range pointer offset while parsing a command request packet that...

PT-2022-36688 · Git +1 · Hunspell

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read error. The crash state indicates involvement of the AffixMgr functions, specifically suffix check,...

PT-2022-21749 · Qualcomm · Qualcomm Ipc

Name of the Vulnerable Software and Affected Versions: Qualcomm IPC in Snapdragon Mobile affected versions not specified Description: The issue is related to memory corruption in Qualcomm IPC due to a buffer copy without checking the size of the input while starting communication with a compromis...

PT-2022-17480 · Qualcomm · Snapdragon Mobile

Name of the Vulnerable Software and Affected Versions: Snapdragon Mobile affected versions not specified Description: The issue is related to memory corruption in the multimedia component of Snapdragon Mobile, caused by a use-after-free error during callback registration failure. Recommendations:...

PT-2022-25927 · Devhub · Devhub

Name of the Vulnerable Software and Affected Versions: devhub version 0.102.0 Description: The issue is related to broken session control in the software. Recommendations: For devhub version 0.102.0, at the moment, there is no information about a newer version that contains a fix for this...

PT-2022-36685 · Git +1 · Fluent-Bit

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 1 crash was reported. The crash occurred in the following functions: flb parser create, flb parser conf file, and is related ...