PT-2022-22325 · Tabit · Tabit

Name of the Vulnerable Software and Affected Versions: Tabit affected versions not specified Description: The issue allows for arbitrary account modification. An endpoint mapped by a tiny URL permits an adversary to modify personal details, such as email addresses and phone numbers, of a specific...

PT-2022-37209 · Apache · Apache Commons Jxpath

Name of the Vulnerable Software and Affected Versions: Apache Commons JXPath affected versions not specified Description: A security exception crash has been reported in Apache Commons JXPath. The crash occurs in the org.apache.commons.jxpath.ri.axes package, specifically in the...

PT-2022-22326 · Tabit · Tabit

Name of the Vulnerable Software and Affected Versions: Tabit affected versions not specified Description: The issue concerns excessive data exposure through an API endpoint. Specifically, the endpoint for reservation cancellation contains the MongoDB ID of the reservation and organization, which...

PT-2022-37208 · Apache · Apache Commons Jxpath

Name of the Vulnerable Software and Affected Versions: Apache Commons JXPath affected versions not specified Description: The issue is related to a security exception in the Apache Commons JXPath library. The crash occurs in the parenthesize method of CoreOperation and the toString method of...

PT-2022-37202 · Git +1 · Ghostscript

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 1 crash has been reported. The crash involves the functions gs type2 interpret, copied type1 glyph outline, and gs default...

PT-2022-37206 · Unknown · Com.Fasterxml.Jackson.Dataformat.Tomcat

Name of the Vulnerable Software and Affected Versions: com.fasterxml.jackson.dataformat.tomcat version affected versions not specified Description: A security exception occurs due to a crash in the com.fasterxml.jackson.dataformat.toml module. The issue is related to the parseInlineTable,...

PT-2022-37205 · Oracle · Java.Base

Name of the Vulnerable Software and Affected Versions: java.base affected versions not specified Description: A security exception occurs due to a crash in the com.ctc.wstx.dtd.FullDTDReader.readContentSpec function, which is related to the CESU 8.updatePositions and CESU 8$Encoder.encodeArrayLoo...

PT-2022-37204 · Git +1 · Ghostscript

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of UNKNOWN WRITE. The crash state involves several function calls, including pdfi free array, pdfi free object, and...

PT-2022-37192 · Git +1 · Ghostscript

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read crash. Technical details about the crash include the crash type being a heap-buffer-overflow read of ...

PT-2022-23482 · Jizhicms · Jizhicms

Name of the Vulnerable Software and Affected Versions: jizhicms version 2.3.1 Description: The issue is related to SQL injection in the background of the software. Recommendations: For jizhicms version 2.3.1, at the moment, there is no information about a newer version that contains a fix for thi...

PT-2022-14180 · Unknown · Octopus Deploy

Name of the Vulnerable Software and Affected Versions: Octopus Deploy affected versions not specified Description: The issue allows sensitive variables to be unmasked by utilizing the variable preview feature in affected versions of the software. Recommendations: At the moment, there is no...

PT-2022-37197 · Git +1 · Jackson-Modules-Java8

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A security exception crash was reported, with details including a crash type and crash state. The crash state involves methods such as fuzzerTestOneInput...

PT-2022-14706 · Unknown · Octopus Deploy

Name of the Vulnerable Software and Affected Versions: Octopus Deploy affected versions not specified Description: The issue allows for a Regex Denial of Service via the package upload function. Recommendations: At the moment, there is no information about a newer version that contains a fix for...

PT-2022-19266 · Laravel · Laravel

Name of the Vulnerable Software and Affected Versions: Laravel version 5.1 Description: A critical issue was found, affecting an unknown function, which leads to deserialization. The attack can be launched remotely. The exploit has been disclosed to the public. Recommendations: For Laravel versio...

PT-2022-20398 · Intel · Intel Standard Manageability +1

Name of the Vulnerable Software and Affected Versions: IntelR AMT and IntelR Standard Manageability affected versions not specified Description: The issue is related to insufficiently protected credentials, which may allow a privileged user to potentially enable information disclosure via local...

PT-2022-37189 · Git +1 · Ghostscript

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a stack-buffer-underflow read error. Technical details about the crash include the functions gs type2 interpret, copied type1 gly...

PT-2022-23948 · Pdf Xchange · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations. It requires user interaction, such as visiting a malicious page or opening a...

PT-2022-24058 · Libjpeg +1 · Libjpeg +1

Name of the Vulnerable Software and Affected Versions: libjpeg affected versions not specified Description: The issue is related to an infinite loop in the Frame::ParseTrailer component. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

PT-2022-23987 · Payara · Payara Micro +2

Name of the Vulnerable Software and Affected Versions: Payara versions through 5.2022.2 Description: The issue allows directory traversal without authentication, affecting Payara Server, Payara Micro, and Payara Server Embedded. Recommendations: For Payara versions through 5.2022.2, update to a...

PT-2022-22617 · Nginx · Nginx Njs

Name of the Vulnerable Software and Affected Versions: Nginx NJS version 0.7.5 Description: An issue was discovered in Nginx NJS where the JUMP offset for a break instruction was not set to a correct offset during code generation, leading to a segmentation violation. Recommendations: For Nginx NJ...