PT-2022-6996 · Exim +4 · Exim +4

Name of the Vulnerable Software and Affected Versions: Exim affected versions not specified Description: The issue is related to an out-of-bounds read in the Exim smtp service, which can allow network-adjacent attackers to disclose sensitive information on affected installations of Exim. The...

PT-2022-6997 · Exim +4 · Exim +4

Name of the Vulnerable Software and Affected Versions: Exim affected versions not specified Description: The issue is related to the handling of NTLM challenge requests in Exim, which can result in a read past the end of an allocated data structure due to the lack of proper validation of...

PT-2022-15088 · Mediatek +1 · Mt6580 +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: In telephony, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. Us...

PT-2022-3262

Name of the Vulnerable Software and Affected Versions Dominion Voting Systems ImageCast X affected versions not specified Description The issue is related to inadequate protection of an alternative path in the ImageCast X device software, allowing an attacker to reboot the device into Android Saf...

PT-2022-11819

Name of the Vulnerable Software and Affected Versions semver-regex affected versions not specified Description An exponential ReDoS Regular Expression Denial of Service can be triggered in the semver-regex npm package when an attacker supplies arbitrary input to the test method. Recommendations A...

Security Bulletin: Publicly disclosed vulnerability in GNU Binutils affects IBM Netezza Performance Server

Summary GNU Binutils is used by IBM Netezza Platform Server. IBM Netezza Platform Server has addressed the applicable CVE. Vulnerability Details CVEID: CVE-2021-45078 DESCRIPTION: GNU Binutils is vulnerable to a denial of service, caused by an out-of-bounds write flaw in the stabxcoffbuiltintype...

PT-2022-16814 · Winaprs · Winaprs

Name of the Vulnerable Software and Affected Versions: WinAPRS version 2.9.0 Description: An issue was discovered in the VHF KISS TNC component, allowing a remote attacker to achieve remote code execution via malicious AX.25 packets over the air. This issue only affects products that are no longe...

PT-2022-11559 · Swftools · Swftools

Name of the Vulnerable Software and Affected Versions: swftools versions 20201222 and earlier Description: An issue was discovered in swftools that allows an attacker to cause code execution through a memory leak when swfdump is used. Recommendations: For versions 20201222 and earlier, at the...

PT-2022-11724 · Totolink · Totolink Ex1200T

Name of the Vulnerable Software and Affected Versions: TOTOLINK EX1200T version 4.1.2cu.5215 Description: The issue allows for remote execution of arbitrary code due to a command injection vulnerability. Recommendations: For TOTOLINK EX1200T version 4.1.2cu.5215, at the moment, there is no...

PT-2022-4315 · Cscape · Cscape

Name of the Vulnerable Software and Affected Versions: CScape affected versions not specified Description: The issue is related to a heap-based buffer overflow via an uninitialized pointer, which may allow an attacker to execute arbitrary code. This can be exploited to potentially gain control ov...

Security Bulletin: IBM Elastic Storage System 3000 is affected by cross-site scripting (CVE-2020-4358)

Summary A security vulnerability has been identified in all levels of IBM Elastic Storage System 3000 GUI. A fix for this vulnerability is available. Vulnerability Details CVEID:CVE-2020-4358 DESCRIPTION: IBM Spectrum Scale 5.0.0.0 through 5.0.4.4 is vulnerable to cross-site scripting. This...

Security Bulletin: A vulnerability has been identified in IBM Elastic Storage System 3000 GUI where an unauthorised user can execute commands (CVE-2020-4348)

Summary A security vulnerability has been identified in IBM Elastic Storage System 3000 GUI that could allow an unauthorised user to execute commands . A fix for this vulnerability is available. Vulnerability Details CVEID: CVE-2020-4348 DESCRIPTION: IBM Spectrum Scale 4.2.0.0 through 4.2.3.21 an...

PT-2022-19148 · Apport +2 · Apport +2

Name of the Vulnerable Software and Affected Versions: Apport affected versions not specified Description: The issue is related to Apport argument parsing, which mishandles filename splitting on older kernels, resulting in argument spoofing. Recommendations: At the moment, there is no information...

PT-2022-19710 · Konica Minolta +1 · Konica Minolta Bizhub Mfp +1

Name of the Vulnerable Software and Affected Versions: Konica Minolta bizhub MFP devices affected versions not specified Description: The issue concerns an internal Chromium browser in Konica Minolta bizhub MFP devices that executes with root access privileges. This could potentially allow for...

PT-2022-9863 · Hcl +1 · Hcl Unica +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue occurs due to poorly configured XML parsers processing user-supplied input without sufficient validation, allowing attackers to manipulate XML content and inject malicious...

Out-of-bounds

LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tiflzw.c:619, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit b4e79bfa...

CVE-2022-1622

LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tiflzw.c:619, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit b4e79bfa...

PT-2022-2468 · Microsoft · Windows Ntfs +1

Name of the Vulnerable Software and Affected Versions: Windows NTFS affected versions not specified Description: The issue is related to an information disclosure vulnerability in the Windows NTFS file system, which can allow an attacker to obtain unauthorized access to protected information. Thi...

PT-2022-2458 · Microsoft · Windows Playto Manager +1

Name of the Vulnerable Software and Affected Versions: Windows PlayTo Manager affected versions not specified Description: The issue is related to synchronization errors when using a shared resource in the Windows PlayTo Manager component. This can allow an attacker to elevate their privileges...

PT-2022-2449 · Microsoft · Windows Print Spooler +1

Name of the Vulnerable Software and Affected Versions: Windows Print Spooler affected versions not specified Description: The issue is related to insufficient access control in the Windows Print Spooler, which can be exploited to elevate privileges. This allows an attacker to affect the system. N...