PT-2022-18336 · Semcms · Semcms

Name of the Vulnerable Software and Affected Versions: SEMCMS affected versions not specified Description: A critical vulnerability has been found in SEMCMS, affecting an unknown part of the file Ant Check.php. The manipulation of the DID argument leads to sql injection. It is possible to initiat...

PT-2022-4170 · Microsoft · Windows Fax Service +1

Name of the Vulnerable Software and Affected Versions: Windows Fax Service affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows Fax Service, which can be exploited to elevate privileges. This allows an attacker to affect the system. ...

PT-2022-4421 · Microsoft · Windows Sstp +1

Name of the Vulnerable Software and Affected Versions: Windows Secure Socket Tunneling Protocol SSTP affected versions not specified Description: The issue is related to errors in synchronization when using a shared resource in the implementation of the Secure Socket Tunneling Protocol SSTP in...

PT-2022-4115 · Microsoft · Exchange Server

Name of the Vulnerable Software and Affected Versions: Microsoft Exchange Server affected versions not specified Description: The issue is related to an information disclosure problem. It allows a remote attacker to gain unauthorized access to protected information. Recommendations: At the moment...

PT-2022-4202 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery affected versions not specified Description: The issue is related to insufficient access controls in Azure Site Recovery, specifically affecting the VMware to Azure functionality. Exploitation of this issue may allow an...

PT-2022-4113 · Microsoft · Exchange Server

Name of the Vulnerable Software and Affected Versions: Microsoft Exchange Server affected versions not specified Description: The issue is related to insufficient access controls in Microsoft Exchange Server, allowing a remote attacker to elevate their privileges. This can impact the system,...

PT-2022-4267 · Microsoft · Windows Sstp +1

Name of the Vulnerable Software and Affected Versions: Windows Secure Socket Tunneling Protocol SSTP affected versions not specified Description: The issue is related to synchronization errors when using a shared resource in the implementation of the Secure Socket Tunneling Protocol SSTP in...

PT-2022-4269 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in synchronization when using a shared resource in the implementation of the Secure Socket Tunneling Protocol SSTP in the Windows operating system. This can...

PT-2022-4090 · Microsoft · Windows Server +1

Name of the Vulnerable Software and Affected Versions: Windows Server affected versions not specified Description: The issue exists due to insufficient input validation in Windows Server, allowing a remote attacker to execute arbitrary code. This can affect the system, enabling the attacker to...

PT-2022-4119 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to an uncontrolled resource consumption in the implementation of the Point-to-Point Protocol PPP in the Windows operating system. This can be exploited by a remote...

PT-2022-37170 · Git +1 · Ghostscript

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-use-after-free error, which occurs when the program attempts to access memory that has already been freed. The crash state...

PT-2022-37164 · Unknown · Libarchive

Name of the Vulnerable Software and Affected Versions: libarchive affected versions not specified Description: The issue is related to a heap-use-after-free read error. Technical details about the crash include the archive read data function and the process head file function in libarchive...

PT-2022-37167 · Git +1 · Open62541

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-use-after-free READ 4 crash has been reported. The crash involves the UA Server networkCallback function and the fuzz binary message.cc file, with...

PT-2022-37166 · Git +1 · Mruby

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow crash. Technical details include a crash type of Heap-buffer-overflow WRITE 4, and the crash state involve...

PT-2022-18128 · Sourcecodester · Sourcecodester Wedding Hall Booking System

Name of the Vulnerable Software and Affected Versions: SourceCodester Wedding Hall Booking System affected versions not specified Description: A problematic issue has been found in the SourceCodester Wedding Hall Booking System, affecting some unknown functionality of the file "/whbs/?page=manage...

PT-2022-18117 · Sourcecodester · Sourcecodester Gym Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Gym Management System affected versions not specified Description: A critical vulnerability was found in the SourceCodester Gym Management System, allowing for SQL injection through the manipulation of the user pass argument...

PT-2022-18129 · Sourcecodester · Sourcecodester Wedding Hall Booking System

Name of the Vulnerable Software and Affected Versions: SourceCodester Wedding Hall Booking System affected versions not specified Description: A vulnerability was found in the SourceCodester Wedding Hall Booking System, affecting an unknown part of the file /whbs/admin/?page=user of the component...

PT-2022-37162 · Dav1D · Dav1D

Name of the Vulnerable Software and Affected Versions: dav1d affected versions not specified Description: The issue is related to a crash caused by the use of an uninitialized value. Technical details include the involvement of specific functions such as cdef filter block c and cdef filter block...

PT-2022-37163 · Rdkit · Rdkit

Name of the Vulnerable Software and Affected Versions: RDKit affected versions not specified Description: The issue is related to a heap-buffer-overflow read, which occurs in the RDKit::ParseV3000AtomProps function. This function is called by RDKit::ParseV3000AtomBlock and...

PT-2022-22318 · Synel +1 · Eharmony +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The issue allows an attacker to inject HTML or JavaScript code into a vulnerable input field. To reach the vulnerable input, an attacker would navigate to Workers worker nickname, and...