PT-2022-9182 · Red Hat · Wildfly Elytron

Name of the Vulnerable Software and Affected Versions: WildFly Elytron affected versions not specified Description: A flaw was found in WildFly Elytron, related to a session fixation exploit when using Undertow, despite Undertow switching the session ID after authentication. Recommendations: At t...

PT-2022-12135 · Yottadb · Yottadb

Name of the Vulnerable Software and Affected Versions: YottaDB versions prior to r1.32 and V7.0-000 Description: An issue was discovered that allows attackers to control the size and input to calls to memcpy in op fnfnumber in sr port/op fnfnumber.c using crafted input. This can lead to memory...

PT-2022-9202 · Accusoft · Accusoft Imagegear

Name of the Vulnerable Software and Affected Versions: Accusoft ImageGear version 19.10 Description: A heap-based buffer overflow issue exists in the DecoderStream::Append functionality. This can be triggered by a specially-crafted file, potentially leading to code execution. An attacker can...

PT-2022-15405 · Ibm · Ibm Aspera High-Speed Transfer

Name of the Vulnerable Software and Affected Versions: IBM Aspera High-Speed Transfer versions 4.3.1 and earlier Description: The issue allows an authenticated user to obtain information from non-sensitive operating system files that they should not have access to. Recommendations: For IBM Aspera...

PT-2022-2299 · Cisco · Cisco Iox +1

Name of the Vulnerable Software and Affected Versions: Cisco IOx affected versions not specified Description: The issue exists due to incorrect restriction of the directory path name with limited access. An attacker could inject arbitrary commands into the underlying host operating system, execut...

PT-2022-2277 · Cisco · Cisco Ios Xe

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software affected versions not specified Description: A vulnerability in the Tool Command Language Tcl interpreter could allow an authenticated, local attacker to escalate from privilege level 15 to root-level privileges. This...

PT-2022-2905 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery affected versions not specified Description: The issue is related to errors in information processing, which can allow a remote attacker to gain unauthorized access to protected information. Recommendations: At the moment,...

PT-2022-2599 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the implementation of the Lightweight Directory Access Protocol LDAP in Microsoft Windows, specifically due to insufficient input validation. This allows a remote...

PT-2022-2663 · Microsoft · Windows Kernel +1

Name of the Vulnerable Software and Affected Versions: Windows Kernel affected versions not specified Description: The issue is related to errors in information processing. It may allow a remote attacker to gain unauthorized access to protected information. Recommendations: At the moment, there i...

PT-2022-2883 · Microsoft · Windows Print Spooler +1

Name of the Vulnerable Software and Affected Versions: Windows Print Spooler affected versions not specified Description: The issue is related to insecure privilege management in the Windows Print Spooler. It allows an attacker to elevate their privileges, potentially affecting the system. No...

PT-2022-2926 · Microsoft · Windows Graphics +1

Name of the Vulnerable Software and Affected Versions: Windows Graphics Component affected versions not specified Description: The issue is related to a lack of protection for sensitive data in the Windows Graphics Component, which can be exploited to disclose protected information. This can allo...

PT-2022-2706 · Microsoft · Local Security Authority Subsystem Service +1

Name of the Vulnerable Software and Affected Versions: Windows Local Security Authority Subsystem Service LSASS affected versions not specified Description: The issue is related to insufficient input validation in the Windows Local Security Authority Subsystem Service LSASS, which can be exploite...

PT-2022-2662 · Microsoft · Windows Telephony Service +1

Name of the Vulnerable Software and Affected Versions: Windows Telephony Service affected versions not specified Description: The issue is related to insecure privilege management in the Windows Telephony Service of Windows operating systems. It allows an attacker to elevate their privileges. Thi...

PT-2022-2670 · Microsoft · Windows Digital Media Receiver +1

Name of the Vulnerable Software and Affected Versions: Windows Digital Media Receiver affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows Digital Media Receiver component of Windows operating systems. Exploitation of this issue may...

PT-2022-2542 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient protection of internal data in the Windows operating system, which can be exploited to gain unauthorized access to protected information. This can allow...

PT-2022-2723 · Microsoft · Windows Server Service +1

Name of the Vulnerable Software and Affected Versions: Windows Server Service affected versions not specified Description: The issue is related to insufficient input validation in the Windows operating system, allowing remote attackers to execute arbitrary code and affect the system. This can be...

PT-2022-2840 · Microsoft · Windows Dns Server +1

Name of the Vulnerable Software and Affected Versions: Windows DNS Server affected versions not specified Description: The issue is related to errors in the code of the Windows operating system. It allows remote attackers to execute arbitrary code, affecting the system. Recommendations: At the...

PT-2022-2934 · Microsoft · .Net Framework

Name of the Vulnerable Software and Affected Versions: .NET Framework affected versions not specified Description: The issue is related to incorrect cleanup or release of resources in the .NET Framework, which can be exploited by a remote attacker to cause a denial of service, affecting the syste...

PT-2022-2531 · Microsoft · Windows Kernel +1

Name of the Vulnerable Software and Affected Versions: Windows Kernel affected versions not specified Description: The issue is related to insufficient access control in the Windows operating system kernel, which can be exploited to elevate privileges. This allows an attacker to affect the system...

PT-2022-2922 · Microsoft · Windows Common Log File System Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Common Log File System CLFS Driver affected versions not specified Description: The issue is related to insecure privilege management in the Windows Common Log File System CLFS driver of the Microsoft Windows operating system...