PT-2022-16408 · Tcl · Tcl Linkhub Mesh Wi-Fi

Name of the Vulnerable Software and Affected Versions: TCL LinkHub Mesh Wi-Fi MS1G 00 01.00 14 Description: A buffer overflow issue exists in the GetValue functionality. This can be triggered by a specially-crafted configuration value, allowing an attacker to modify the configuration and cause a...

PT-2022-4062 · Dd-Wrt · Dd-Wrt

Name of the Vulnerable Software and Affected Versions: DD-WRT versions Revision 32270 through Revision 48599 Description: The issue is related to insufficient input validation in the httpd module of DD-WRT, which can be exploited by sending a specially-crafted HTTP request to execute arbitrary...

PT-2022-18005 · Red Hat · Keycloak

Name of the Vulnerable Software and Affected Versions: Keycloak affected versions not specified Description: An issue was discovered in Keycloak that allows arbitrary Javascript to be uploaded for the SAML protocol mapper even if the UPLOAD SCRIPTS feature is disabled. Recommendations: At the...

PT-2022-4157 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge affected versions not specified Description: The issue is related to a buffer overflow in memory, allowing a remote attacker to execute arbitrary code. Recommendations: At the moment, there is no information about a newer versi...

PT-2022-37161 · Git +1 · Mruby

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow WRITE 4 crash type. The crash state involves several functions: udiv, mpz mdiv, and mrb bint div. No...

PT-2022-18536 · Tcl · Tcl Linkhub Mesh Wi-Fi

Name of the Vulnerable Software and Affected Versions: TCL LinkHub Mesh Wi-Fi MS1G 00 01.00 14 Description: An information disclosure issue exists in the confctl get master wlan functionality. A specially-crafted network packet can lead to information disclosure. An attacker can send packets to...

PT-2022-37160 · Git +1 · Ndpi

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read crash. Technical details about the crash include the dissect softether ip port, ndpi search softether...

PT-2022-37421 · Unknown · Interledger

Name of the Vulnerable Software and Affected Versions: Interledger affected versions not specified Description: The Interledger family of crates is no longer actively maintained, and the owner of the published crate is unresponsive. There is a concern regarding username comparison, which may or m...

PT-2022-17882 · Unknown · Jeecg-Boot

Name of the Vulnerable Software and Affected Versions: jeecg-boot affected versions not specified Description: A critical issue has been found in jeecg-boot, affecting unknown code of the file "/api/". The manipulation of the file argument leads to unrestricted upload. The attack can be initiated...

PT-2022-6792 · Red Hat +6 · 389-Ds-Base +7

Name of the Vulnerable Software and Affected Versions: 389-ds-base affected versions not specified Description: A flaw in the Content Synchronization plugin of 389 Directory Server allows an authenticated attacker to cause a denial of service by exploiting a NULL pointer dereference using a...

PT-2022-22442 · Laravel · Laravel

Name of the Vulnerable Software and Affected Versions: Laravel version 5.1 Description: The issue is related to a remote code execution vulnerability in the ChanceGenerator component via the call function. This allows for potential exploitation. Recommendations: For Laravel version 5.1, at the...

PT-2022-18481 · Hcl · Hcl Launch

Name of the Vulnerable Software and Affected Versions: HCL Launch affected versions not specified Description: The issue allows an authenticated user to obtain sensitive information in some instances due to improper security checking. Recommendations: At the moment, there is no information about ...

PT-2022-37511 · Mokutil · Mokutil

Name of the Vulnerable Software and Affected Versions: mokutil affected versions not specified Description: The issue concerns the addition of SBAT revocation support to mokutil. New options have been added to the manpage, including mokutil --sbat to list all entries in SBAT, mokutil...

PT-2022-22637 · Nhi Card · Nhi Card

Name of the Vulnerable Software and Affected Versions: NHI card affected versions not specified Description: The issue is related to a stack-based buffer overflow vulnerability in the NHI card's web service component. This vulnerability is caused by insufficient validation for the key parameter i...

PT-2022-37155 · Git +1 · Libredwg

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow WRITE 4 crash type. The crash state involves functions such as decode preR13 section hdr, decode preR13, a...

PT-2022-13781 · Thales +1 · Citadel Macosx Desktop Client +3

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves the bypassing of embedded neutralization of Script-Related HTML Tag under certain extra conditions. No information is provided about...

PT-2022-6969 · Gawk +6 · Gawk +6

Name of the Vulnerable Software and Affected Versions: gawk affected versions not specified Description: The issue is related to a heap out-of-bounds read flaw in the builtin.c component of the gawk utility. This flaw may lead to a crash and could be exploited to read sensitive information. There...

PT-2022-3988 · Nvidia +3 · Nvidia Gpu Display Driver For Linux +3

Name of the Vulnerable Software and Affected Versions: NVIDIA GPU Display Driver for Linux affected versions not specified Description: The issue is related to a vulnerability in an optional D-Bus configuration file of the NVIDIA GPU Display Driver for Linux. This vulnerability can be exploited b...

PT-2022-15130 · Audio Ipi · Audio Ipi

Name of the Vulnerable Software and Affected Versions: audio ipi affected versions not specified Description: In audio ipi, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is...

PT-2022-17837 · Cta · Cta

Name of the Vulnerable Software and Affected Versions: cta affected versions not specified Description: The issue is related to a missing permission check, allowing for the writing of permission usage records of an app. This could lead to local escalation of privilege without requiring additional...