PT-2022-13325 · Suse · Suse

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The issue was investigated and found not to be a security issue. It was withdrawn by its CNA. Recommendations: At the moment, there is no information about a newer version th...

PT-2022-4164 · Unknown +5 · Xen Hypervisor +5

Name of the Vulnerable Software and Affected Versions: Xen hypervisor netfront component affected versions not specified Description: The issue is caused by synchronization errors when using a shared resource in the netfront component of the Xen hypervisor. Exploitation of this issue may allow an...

PT-2022-11174 · Unknown · Nearby Module

Name of the Vulnerable Software and Affected Versions: Nearby module affected versions not specified Description: The issue is related to a permission control vulnerability. Successful exploitation of this vulnerability will impact availability and integrity. Recommendations: At the moment, there...

PT-2022-11172 · Huawei · Emui +2

Name of the Vulnerable Software and Affected Versions: System components affected versions not specified Description: The issue concerns unauthorized access to system components. Successful exploitation will impact confidentiality. Recommendations: At the moment, there is no information about a...

PT-2022-17152 · Phicomm · K2 Firmware +1

Name of the Vulnerable Software and Affected Versions: No specific software or version is mentioned, so the description is: Device affected versions not specified Description: The issue concerns improper physical access control and the use of hard-coded credentials in /etc/passwd. This allows an...

PT-2022-4330 · Unknown +5 · Xen Hypervisor +5

Name of the Vulnerable Software and Affected Versions: Xen hypervisor affected versions not specified Description: The issue is caused by synchronization errors when using a shared resource in the gntalloc driver of the Xen hypervisor. Exploitation of this issue may allow an attacker to cause a...

PT-2022-8591

Name of the Vulnerable Software and Affected Versions Intelliants Subrion CMS version 4.2.1 Description A Cross Site Scripting XSS issue exists in the Configuration panel of the software. This allows for potential malicious script injection and execution. No information is provided about the...

PT-2022-7477 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel's tipc component can cause a kernel panic when enabling a bearer on a node. This occurs due to a null-pointer dereference in the tipc mon prep...

Security Bulletin: IBM MQ Appliance is affected by an incorrect session invalidation vulnerability (CVE-2021-38986)

Summary IBM MQ Appliance has resolved an incorrect session invalidation vulnerability. Vulnerability Details CVEID: CVE-2021-38986 DESCRIPTION: IBM MQ Appliance does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. CVSS Base...

Security Bulletin: glibc vulnerability affects IBM Elastic Storage System (CVE-2021-27645)

Summary IBM Elastic Storage System is shipped with GNU glibc, for which a fix is available for a security vulnerability. Vulnerability Details CVEID:CVE-2021-27645 DESCRIPTION: GNU glibc is vulnerable to a denial of service, caused by double-free in the nameserver caching daemon nscd. By sending ...

PT-2022-15682 · Cybonet · Cybonet Pineapp Mail Relay

Name of the Vulnerable Software and Affected Versions: Cybonet PineApp Mail Relay affected versions not specified Description: The issue allows an attacker to send a request to the "/manage/mailpolicymtm/log/eml viewer/email.content.body.php" API endpoint with a filesystem path parameter set to a...

PT-2022-13397 · 1Byte · Copy9 +8

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The backend infrastructure shared by multiple mobile device monitoring services does not adequately authenticate or authorize API requests, creating an Insecure Direct Object...

Security Bulletin: IBM Sterling Connect:Direct Web Services is vulnerable to remote code execution due to Apache Log4j (CVE-2022-23302)

Summary There is a vulnerability in the Apache Log4j open source library used by IBM Sterling Connect:Direct Web Services. This affects IBM Sterling Connect:Direct Web Services. This vulnerability has been addressed. Vulnerability Details CVEID: CVE-2022-23302 DESCRIPTION: Apache Log4j could allo...

PT-2022-10897 · Unknown · Uefi Firmware

Name of the Vulnerable Software and Affected Versions: UEFI firmware BIOS affected versions not specified Description: Potential vulnerabilities have been identified in UEFI firmware BIOS for some PC products which may allow escalation of privilege and arbitrary code execution. Recommendations: A...

PT-2022-9053 · Hewlett Packard · Hp Support Assistant

Name of the Vulnerable Software and Affected Versions: HP Support Assistant affected versions not specified Description: A security issue has been identified in the HP Support Assistant software, potentially compromising its integrity and allowing communication with untrusted clients...

PT-2022-9056 · Hewlett Packard · Hp Support Assistant

Name of the Vulnerable Software and Affected Versions: HP Support Assistant affected versions not specified Description: The issue concerns potential security vulnerabilities, including compromise of integrity and allowed communication with untrusted clients. Recommendations: At the moment, there...

CVE-2022-0562

Null source pointer passed as an argument to memcpy function within TIFFReadDirectory in tifdirread.c in libtiff versions from 4.0 to 4.3.0 could lead to Denial of Service via crafted TIFF file. For users that compile libtiff from sources, a fix is available with commit 561599c...

PT-2022-8503 · Drupal · Drupal Quickedit Module

Name of the Vulnerable Software and Affected Versions: Drupal QuickEdit module affected versions not specified Description: The QuickEdit module does not properly check access to fields in some circumstances, which can lead to unintended disclosure of field data. Sites are only affected if the...

PT-2022-12337 · Tcpreplay +2 · Tcpreplay +2

Name of the Vulnerable Software and Affected Versions: tcpreplay version 4.3.4 Description: The issue is related to a Reachable Assertion in the add tree ipv4 function at tree.c. Recommendations: For tcpreplay version 4.3.4, at the moment, there is no information about a newer version that contai...

CVE-2022-0561

Null source pointer passed as an argument to memcpy function within TIFFFetchStripThing in tifdirread.c in libtiff versions from 3.9.0 to 4.3.0 could lead to Denial of Service via crafted TIFF file. For users that compile libtiff from sources, the fix is available with commit eecb0712...