PT-2022-12836 · Bentley · Bentley Microstation Connect

Name of the Vulnerable Software and Affected Versions: Bentley MicroStation CONNECT version 10.16.0.80 Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a maliciou...

PT-2022-9908 · Esri · Esri Arcreader

Name of the Vulnerable Software and Affected Versions: Esri ArcReader versions 10.8.1 and earlier Description: An out-of-bounds read issue exists when parsing a specially crafted file, allowing an unauthenticated attacker to induce an information disclosure issue in the context of the current use...

PT-2022-12234

Name of the Vulnerable Software and Affected Versions Single Connect affected versions not specified Description The issue arises from the lack of an authorization check in the sc-reports-ui module, allowing a remote attacker to access the device configuration page and export data to an external...

PT-2022-2697

Name of the Vulnerable Software and Affected Versions cURL affected versions not specified Description The issue is related to the implementation of the HSTS HTTP Strict Transport Security mechanism in the cURL utility. It could be bypassed if the hostname in the given URL used a trailing dot whi...

PT-2022-12636 · Duktape · Duktape

Name of the Vulnerable Software and Affected Versions: Duktape version 2.99.99 Description: A SEGV issue was found in Duktape via the duk push tval component in duk api stack.c. Recommendations: For Duktape version 2.99.99, at the moment, there is no information about a newer version that contain...

PT-2022-2309 · Confd +1 · Confd +1

Name of the Vulnerable Software and Affected Versions: ConfD affected versions not specified Description: A vulnerability in the implementation of the CLI on a device running ConfD could allow an authenticated, local attacker to perform a command injection attack. The issue is due to insufficient...

PT-2022-13058

Name of the Vulnerable Software and Affected Versions corenlp affected versions not specified Description The issue is related to Improper Restriction of XML External Entity Reference. No information is provided about the estimated number of potentially affected devices or real-world incidents...

PT-2022-11465

Name of the Vulnerable Software and Affected Versions calibre-web affected versions not specified Description The issue is related to Business Logic Errors. There is no information provided about the estimated number of potentially affected devices or real-world incidents where this issue was...

PT-2022-1986 · Microsoft · Windows Remote Desktop Client +1

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Remote Desktop Client affected versions not specified Description: The issue is related to incorrect code generation management in the Remote Desktop Client of Microsoft Windows. It allows a remote attacker to execute...

PT-2022-9145

Name of the Vulnerable Software and Affected Versions Android SoC affected versions not specified Description A bug has been identified in Android SoC, with a HackerOne bug ID of 1343975 and an Android ID of A-204256722. Recommendations At the moment, there is no information about a newer version...

PT-2022-1430 · Cisco · Cisco Ece

Name of the Vulnerable Software and Affected Versions: Cisco ECE affected versions not specified Description: A vulnerability in the web-based management interface of Cisco ECE could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the...

PT-2022-1431 · Cisco · Cisco Ece

Name of the Vulnerable Software and Affected Versions: Cisco ECE affected versions not specified Description: A vulnerability in the web-based management interface of Cisco ECE could allow an unauthenticated, remote attacker to perform a username enumeration attack against an affected device. Thi...

PT-2022-13015 · Snipe-It · Snipe-It

Name of the Vulnerable Software and Affected Versions: snipe-it affected versions not specified Description: The issue is related to Missing Authorization and Improper Access Control, which may allow unauthorized access. There is no information provided about the estimated number of potentially...

PT-2022-1494 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the incorrect clearing or release of resources in the Windows IKE extension, which can lead to a denial-of-service condition. This can be exploited by a remote...

PT-2022-1410 · Microsoft · Windows Bind Filter Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Bind Filter Driver affected versions not specified Description: The issue is related to insufficient access control in the Windows Bind Filter Driver, which can be exploited to elevate privileges. This could allow an attacker to affec...

PT-2022-1528 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the implementation of the Windows BackupKey protocol in Windows operating systems, which is associated with information disclosure. Exploitation of this issue may...

PT-2022-1812 · Microsoft · Windows +1

Name of the Vulnerable Software and Affected Versions: Microsoft Diagnostics Hub Standard Collector affected versions not specified Description: The issue is related to insecure privilege management in the Microsoft Diagnostics Hub Standard Collector service of the Microsoft Windows operating...

PT-2022-1519 · Microsoft · Windows User Profile Service +1

Name of the Vulnerable Software and Affected Versions: Windows User Profile Service affected versions not specified Description: The issue is related to insecure privilege management in the Windows User Profile Service of the Windows operating system. It allows an attacker to elevate their...

PT-2022-1790 · Microsoft · Cryptographic Services +1

Name of the Vulnerable Software and Affected Versions: Microsoft Cryptographic Services affected versions not specified Description: The issue is related to insecure privilege management in Microsoft Cryptographic Services, which can be exploited to elevate privileges. This could allow an attacke...

PT-2022-1567 · Microsoft · Windows Installer +1

Name of the Vulnerable Software and Affected Versions: Windows Installer affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows Installer component of Windows operating systems. This can be exploited to elevate privileges. An...