PT-2022-37239 · Git +1 · Ghostscript

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 4 crash has been reported. The crash involves the ttfOutliner BuildGlyphOutlineAux, ttfOutliner Outline, and ngx ttf outline...

PT-2022-37234 · Git +1 · Libressl

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a stack-buffer-overflow read crash. The crash state involves several functions, including CBS stow, i2c ASN1 INTEGER, and asn1 ex...

PT-2022-4598 · Huawei · Huawei Headset

Name of the Vulnerable Software and Affected Versions: Huawei headset products affected versions not specified Description: The issue concerns an out-of-bounds read and write vulnerability. An attacker, with physical access to the device, can craft a malformed message with a specific parameter an...

PT-2022-7207 · Samba +3 · Samba +3

Name of the Vulnerable Software and Affected Versions: Samba affected versions not specified Description: The issue is related to the default permission settings in Samba, a network communication package. It may allow a remote attacker to compromise data integrity. Specifically, Samba does not...

PT-2022-4746 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to a buffer overflow in memory, which can be exploited by an attacker to execute arbitrary code on a target system. This can be achieved by tricki...

PT-2022-37232 · Git +1 · Cras

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of Use-of-uninitialized-value. The crash state involves several functions: dbus marshal write basic, dbus type write...

Security Bulletin:IBM TRIRIGA Application Platform discloses CVE-2020-22475

Summary IBM TRIRIGA Application Platform discloses CVE-2020-22475 Vulnerability Details CVEID:CVE-2020-22475 DESCRIPTION: Tasks could provide weaker than expected security, caused by insecure permissions in VoiceCommandActivity. By sending a specially-crafted request, a remote attacker could...

Security Bulletin:IBM TRIRIGA Application Platform discloses CVE-2020-25020

Summary IBM TRIRIGA Application Platform discloses CVE-2020-25020 Vulnerability Details CVEID:CVE-2020-25020 DESCRIPTION: MPXJ could allow a remote attacker to obtain sensitive information, caused by improper handling of XML external entity XXE declarations by the GanttProjectReader and...

PT-2022-18484 · Hcl · Hcl Versionvault Express

Name of the Vulnerable Software and Affected Versions: HCL VersionVault Express affected versions not specified Description: The issue concerns the exposure of administrator credentials in HCL VersionVault Express. No information is provided about the estimated number of potentially affected...

PT-2022-4526 · Omron · Cx-One

Name of the Vulnerable Software and Affected Versions: CX-One affected versions not specified Description: The issue is related to a use-after-free vulnerability in the CX-Programmer development environment, part of the CX-One software suite used for programming and configuring Omron PLCs. This...

PT-2022-37231 · Git +1 · Ghostscript

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a global buffer overflow read of 8 bytes. The crash state involves several functions, including get unpack proc, xps begin typed...

PT-2022-5547 · Кодекс · Кодекс

Name of the Vulnerable Software and Affected Versions: Кодекс affected versions not specified Description: The issue is related to the lack of protection for the web page structure in the Кодекс web client, which can be exploited by a remote attacker to perform cross-site scripting XSS attacks...

CVE-2022-2953

LibTIFF 4.4.0 has an out-of-bounds read in extractImageSection in tools/tiffcrop.c:6905, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 48d6ece8...

CVE-2022-2953

LibTIFF 4.4.0 has an out-of-bounds read in extractImageSection in tools/tiffcrop.c:6905, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 48d6ece8...

PT-2022-37228 · Git +1 · Open62541

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-use-after-free READ 4 crash has been reported. The crash occurs in the UA Server networkCallback function and involves the fuzz binary message.cc...

PT-2022-37227 · Git +1 · Opensc

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a stack-buffer-overflow crash. Technical details about the crash include the function names sc hsm decode ecdsa signature, sc hsm...

PT-2022-37226 · Git +1 · Grok

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash caused by an incorrect function pointer type. The crash occurs in the grk::BufferedStream::read function, which is called...

PT-2022-23857 · Hirevue · Hirevue Hiring Platform

Name of the Vulnerable Software and Affected Versions: HireVue Hiring Platform version V1.0 Description: The issue concerns the use of a broken or risky cryptographic algorithm. However, this is disputed by the vendor due to inconsistencies with CVE ID assignment rules for cloud services and the...

PT-2022-24432 · Tenda · Tenda Tx9 Pro

Name of the Vulnerable Software and Affected Versions: Tenda TX9pro version V22.03.02.10 Description: A buffer overflow issue was discovered in the httpd/SetNetControlList component. Recommendations: For Tenda TX9pro version V22.03.02.10, at the moment, there is no information about a newer versi...

PT-2022-37219 · Git +1 · Dnsmasq

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap buffer overflow issue was identified, which can cause a crash. The crash occurs in the resize packet function, specifically in the FuzzResizePacke...