CVE-2022-2058

Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit f3a5e010...

CVE-2022-2056

Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit f3a5e010...

PT-2022-3268 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to insufficient input validation in Microsoft Edge. It may allow a remote attacker to execute arbitrary code with elevated privileges...

PT-2022-14366 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-10 through Android-13 Description: The issue is related to a permissions bypass in the deletePackageX function of DeletePackageHelper.java, allowing a Guest user to reset pre-loaded applications for other users. This...

PT-2022-20616 · Unknown · Drive Composer

Name of the Vulnerable Software and Affected Versions: Drive Composer affected versions not specified Description: The issue allows a low-privileged attacker to create and write to a file anywhere on the file system as SYSTEM with arbitrary content, provided the file does not already exist...

PT-2022-20614 · Abb · Abb Automation Builder +1

Name of the Vulnerable Software and Affected Versions: ABB Automation Builder Drive Composer affected versions not specified Description: The issue allows a low-privileged attacker to create and write to a file anywhere on the file system as SYSTEM with arbitrary content, provided the file does n...

PT-2022-10008 · Qualcomm · Qualcomm Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: The issue is related to improper SMMU configuration, allowing RPM secure Stream to access any secure resource. This affects various Qualcomm Snapdragon products, including...

PT-2022-2916 · Microsoft · Windows Network File System +1

Name of the Vulnerable Software and Affected Versions: Windows Network File System affected versions not specified Description: The issue exists due to insufficient input validation in the Windows Network File System, allowing remote attackers to execute arbitrary code. This can result in the...

PT-2022-10408 · Qualcomm · Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: The issue is related to a possible null pointer access due to improper validation of system information messages to be processed. This could potentially occur in Snapdragon...

PT-2022-20863 · Shaam · Shaam

Name of the Vulnerable Software and Affected Versions: SHAAM program affected versions not specified Description: The issue is related to an improper authorization check, which grants business users more than needed authorization to perform certain transactions when using the Israeli File from th...

PT-2022-15215 · Qualcomm · Qualcomm Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: The issue is related to an out of bound read in the WLAN HOST due to an improper length check, which can lead to a denial of service DOS. This affects various Snapdragon product...

PT-2022-10437 · Qualcomm · Snapdragon Connectivity +3

Name of the Vulnerable Software and Affected Versions: Snapdragon Compute affected versions not specified Snapdragon Connectivity affected versions not specified Snapdragon Industrial IOT affected versions not specified Snapdragon Mobile affected versions not specified Description: The issue is...

PT-2022-3304 · Microsoft · Azure Rtos Guix Studio

Name of the Vulnerable Software and Affected Versions: Azure RTOS GUIX Studio affected versions not specified Description: The issue is related to insufficient input validation in the Azure Real Time Operating System GUIX Studio development environment. Exploitation of this issue may allow an...

PT-2022-21169 · Sap · Sap 3D Visual Enterprise Viewer

Name of the Vulnerable Software and Affected Versions: SAP 3D Visual Enterprise Viewer affected versions not specified Description: The issue occurs when a user opens manipulated JPEG 2000 .jp2, jp2k.x3d files received from untrusted sources in SAP 3D Visual Enterprise Viewer. This causes the...

Security Bulletin: A security vulnerability has been fixed in IBM Security Identity Manager Virtual Appliance(CVE-2020-0778)

Summary IBM Security Identity Manager Virtual Appliance ISIM VA has addressed the following vulnerability due to an issue affected by Open Source Vulnerability Details CVEID: CVE-2022-0778 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by a flaw in the BNmodsqrt function when...

PT-2022-20913 · Unknown · Ams Module

Name of the Vulnerable Software and Affected Versions: AMS module affected versions not specified Description: The issue is related to a vulnerability in input validation within the AMS module. This vulnerability can be exploited to cause privilege escalation. Recommendations: At the moment, ther...

PT-2022-20902 · Unknown · Kernel Emcom Module

Name of the Vulnerable Software and Affected Versions: kernel emcom module affected versions not specified Description: The issue is related to multi-thread contention in the kernel emcom module. Successful exploitation of this issue may affect system availability. Recommendations: At the moment,...

HPESBUX04323 rev.1 - HP-UX Common Internet File System (CIFS), Multiple Vulnerabilities

Potential Security Impact: Local: Compromise of System Integrity, Escalation of Privilege, Unauthorized Access, Unauthorized Disclosure of Information, Authentication Restriction Bypass; Remote: Compromise of System Integrity, Escalation of Privilege, Unauthorized Disclosure of Information,...

Security Bulletin: IBM WebSphere Application Server is vulnerable to Spoofing (CVE-2022-22365)

Summary IBM WebSphere Application Server is vulnerable to spoofing when the Ajax Proxy Web Application AjaxProxy.war is deployed. This has been addressed. Vulnerability Details CVEID:CVE-2022-22365 DESCRIPTION: IBM WebSphere Application Server, with the Ajax Proxy Web Application AjaxProxy.war...

Amazon Linux 2 : libtiff (ALAS-2022-1799)

The version of libtiff installed on the remote host is prior to 4.0.3-35. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2022-1799 advisory. A flaw was found in libtiff where a NULL source pointer passed as an argument to the memcpy function within the TIFFReadDirectory ...