PT-2022-2447 · Microsoft · Windows Digital Media Receiver +1

Name of the Vulnerable Software and Affected Versions: Windows Digital Media Receiver affected versions not specified Description: The issue is related to synchronization errors when using a shared resource in the Windows Digital Media Receiver component of the Windows operating system. This can...

PT-2022-2543 · Microsoft · Windows Print Spooler +1

Name of the Vulnerable Software and Affected Versions: Windows Print Spooler affected versions not specified Description: The issue is related to insufficient protection of service data in the Windows Print Spooler, which can allow an attacker to gain unauthorized access to protected information...

PT-2022-2463 · Microsoft · Windows Remote Desktop Protocol +1

Name of the Vulnerable Software and Affected Versions: Windows Remote Desktop Protocol RDP affected versions not specified Description: The issue is related to the implementation of the Remote Desktop Protocol in the Windows operating system, which is associated with information disclosure...

PT-2022-2450 · Microsoft · Windows Remote Access Connection Manager +1

Name of the Vulnerable Software and Affected Versions: Windows Remote Access Connection Manager affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows Remote Access Connection Manager service, which can be exploited to elevate...

PT-2022-2464 · Microsoft · Windows Remote Access Connection Manager +1

Name of the Vulnerable Software and Affected Versions: Windows Remote Access Connection Manager affected versions not specified Description: The issue is related to an information disclosure vulnerability in the Windows Remote Access Connection Manager. It allows attackers to obtain sensitive...

PT-2022-2646 · Microsoft · .Net Framework

Name of the Vulnerable Software and Affected Versions: .NET Framework affected versions not specified Description: The issue is related to insufficient input validation in the .NET Framework, which can lead to a denial of service. This can be exploited by an attacker to cause the system to become...

CVE-2022-29173

go-tuf is a Go implementation of The Update Framework TUF. go-tuf does not correctly implement the client workflow for updating the metadata files for roles other than the root role. Specifically, checks for rollback attacks are not implemented correctly meaning an attacker can cause clients to...

PT-2022-19043 · Unknown · Novel-Plus

Name of the Vulnerable Software and Affected Versions: novel-plus version 3.6.0 Description: The issue is related to an Arbitrary file reading vulnerability. Recommendations: For novel-plus version 3.6.0, at the moment, there is no information about a newer version that contains a fix for this...

PT-2022-2984 · Microsoft · Windows Container Manager Service +1

Name of the Vulnerable Software and Affected Versions: Windows Container Manager Service affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows Container Manager Service of Windows operating systems. It allows an attacker to elevate...

PT-2022-3136 · Microsoft · Windows Installer +1

Name of the Vulnerable Software and Affected Versions: Windows Installer affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in the Windows Installer service, which is caused by insufficient access restrictions. This vulnerability can be...

PT-2022-2974 · Microsoft · Windows Media Center +1

Name of the Vulnerable Software and Affected Versions: Windows Media Center affected versions not specified Description: The issue is related to insufficient access restrictions in Windows Media Center, allowing an attacker to elevate their privileges. There is no information provided about the...

PT-2022-2982 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the implementation of the Lightweight Directory Access Protocol LDAP in the Windows operating system, specifically due to insufficient input validation. This allows ...

CVE-2022-24900

Piano LED Visualizer is software that allows LED lights to light up as a person plays a piano connected to a computer. Version 1.3 and prior are vulnerable to a path traversal attack. The os.path.join call is unsafe for use with untrusted input. When the os.path.join call encounters an absolute...

PT-2022-3562 · American Megatrends +1 · Ami Megarac +1

Name of the Vulnerable Software and Affected Versions: AMI Megarac affected versions not specified Description: The issue is related to the interception of password reset requests via API. There is also a mention of a vulnerability in the OpenSSL library used by the TYCHON network endpoint...

PT-2022-3556 · Ami · Ami Aptiov

Name of the Vulnerable Software and Affected Versions: AMI Aptio versions 5.x Description: A potential attacker can execute arbitrary code at the time of the PEI phase and influence subsequent boot stages, leading to mitigations bypassing, physical memory contents disclosure, discovery of secrets...

PT-2022-10363 · Unknown · Bender/Ebee Charge Controllers

Name of the Vulnerable Software and Affected Versions: Bender/ebee Charge Controllers affected versions not specified Description: The issue allows for Command injection via the Web interface. An authenticated attacker could enter shell commands into some input fields. Recommendations: At the...

Potential Captcha Validate Bypass in flask-session-captcha

Impact flask-session-captcha is a package which allows users to extend Flask by adding an image based captcha stored in a server side session. The captcha.validate function would return None if passed no value e.g. by submitting a request with an empty form. If implementing users were checking th...

PT-2022-6661 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux Kernel affected versions not specified Description: A use after free issue was discovered in the driver/firewire component of the Linux Kernel, specifically in the outbound phy packet callback function. This flaw allows a local attacker...

PT-2022-11968 · Fanuc · Roboguide

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves a network-based attack where threat actors supply a crafted, malicious XML payload. This payload is designed to trigger an external...

PT-2022-6839 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux Kernel affected versions not specified Description: A NULL pointer dereference flaw was found in the dbFree function in fs/jfs/jfs dmap.c in the journaling file system JFS of the Linux Kernel. This issue may allow a local attacker to...