PT-2022-2771 · Microsoft · Windows Dns Server +1

Name of the Vulnerable Software and Affected Versions: Windows DNS Server affected versions not specified Description: The issue is related to synchronization errors in the Windows DNS Server component, specifically a "race condition" scenario. This can be exploited by a remote attacker to execut...

PT-2022-2666

Name of the Vulnerable Software and Affected Versions Microsoft Excel affected versions not specified Description The issue is related to incorrect code generation management in Microsoft Excel, allowing a remote attacker to execute arbitrary code. This can be exploited by remote attackers,...

PT-2022-2772 · Microsoft · Windows File Server Resource Management Service +1

Name of the Vulnerable Software and Affected Versions: Windows File Server Resource Management Service affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows File Server Resource Management Service, which can be exploited to elevate...

PT-2022-2906

Name of the Vulnerable Software and Affected Versions Windows Work Folder Service affected versions not specified Description The issue is related to errors in synchronization when using a shared resource in the Windows Work Folder Service, which can allow an attacker to elevate their privileges...

PT-2022-2541 · Microsoft · Windows Cluster Shared Volume +1

Name of the Vulnerable Software and Affected Versions: Windows Cluster Shared Volumes CSV affected versions not specified Description: The issue is related to insufficient protection of service data in the Cluster Shared Volumes CSV of Windows operating systems. This can allow an attacker to gain...

PT-2022-2888 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the Local Security Authority Subsystem Service LSASS in the Windows operating system and is associated with inadequate access control. Exploitation of this issue may...

PT-2022-2938 · Microsoft · Windows Print Spooler +1

Name of the Vulnerable Software and Affected Versions: Windows Print Spooler affected versions not specified Description: The issue is related to insecure privilege management in the Windows Print Spooler. It allows an attacker to elevate their privileges, potentially affecting the system. No...

PT-2022-3130 · Microsoft · Sql Server

Name of the Vulnerable Software and Affected Versions: Microsoft SQL Server affected versions not specified Description: The issue is related to insufficient input validation in Microsoft SQL Server, allowing a remote attacker to execute arbitrary code by sending a specially crafted SQL query. Th...

PT-2022-2578 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the implementation of the Lightweight Directory Access Protocol LDAP in Microsoft Windows, specifically due to insufficient input validation. This allows a remote...

PT-2022-2813 · Microsoft · Windows Appx Package Manager +1

Name of the Vulnerable Software and Affected Versions: Windows AppX Package Manager affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows AppX Package Manager, which can be exploited to elevate privileges. This allows an attacker to...

PT-2022-3189 · Unknown · Open Management Infrastructure

Name of the Vulnerable Software and Affected Versions: Open Management Infrastructure OMI affected versions not specified Description: The issue is related to an Elevation of Privilege Vulnerability in Open Management Infrastructure OMI, which is associated with inadequate access control...

CVE-2022-24832 Bundled ldap-authentication-plugin fails to neutralise LDAP special elements in usernames

GoCD is an open source a continuous delivery server. The bundled gocd-ldap-authentication-plugin included with the GoCD Server fails to correctly escape special characters when using the username to construct LDAP queries. While this does not directly allow arbitrary LDAP data exfiltration, it ca...

PT-2022-17384 · Seyeon Tech Co. · Flexwatch Fw3170-Ps-E Network Video System

Name of the Vulnerable Software and Affected Versions: Seyeon Tech Co., Ltd FlexWATCH FW3170-PS-E Network Video System version 4.23-3000 GY Description: The issue allows attackers to access sensitive information. Recommendations: For Seyeon Tech Co., Ltd FlexWATCH FW3170-PS-E Network Video System...

PT-2022-2069 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based Description: The issue is related to incorrect code generation management in the browser, which can be exploited by a remote attacker to elevate their privileges. Recommendations: At the moment, there is no...

PT-2022-6438 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to an unauthorized access flaw in the Linux kernel OverlayFS subsystem. This flaw can be exploited by a local user to escalate their privileges on the system. The...

Security Bulletin: IBM Sterling Partner Engagement Manager is vulnerable to insecure direct object exploitation (CVE-2022-22331)

Summary IBM Sterling Partner Engagement Manager CVE-2022-22331 is vulnerable to insecure direct object exploitation. The issue has been addressed and users are strongly advised to apply remediation. Vulnerability Details CVEID: CVE-2022-22331 DESCRIPTION: IBM Sterling Partner Engagement Manager...

PT-2022-3242 · Nvidia · Nvidia Jetson Linux Driver Package

Name of the Vulnerable Software and Affected Versions: NVIDIA Jetson Linux Driver Package affected versions not specified Description: The issue is related to insufficient validation of untrusted data in the Cboot blob decompress function, which may allow a local attacker with elevated privileges...

PT-2022-3250

Name of the Vulnerable Software and Affected Versions NVIDIA GPU Display Driver for Windows affected versions not specified Description The issue is related to a NULL pointer dereference in the kernel mode layer handler for DxgkDdiEscape, which may lead to a system crash. This can be exploited to...

PT-2022-7719 · Unknown · Pro2Col Stingray Fts

Name of the Vulnerable Software and Affected Versions: Pro2col Stingray FTS affected versions not specified Description: A problematic issue has been found in the software, where the manipulation of the Username argument leads to cross-site scripting. The attack can be initiated remotely. It is...

PT-2022-13622 · Libtiff +3 · Libtiff +3

Name of the Vulnerable Software and Affected Versions: libtiff version 4.3.0 Description: The issue is an Out-of-bounds Read error in the tiffcrop function of libtiff, allowing attackers to cause a denial-of-service via a crafted tiff file. Recommendations: For version 4.3.0, the fix is available...