PT-2022-6272 · Moxa +1 · Moxa Uc-8100 Series +9

Name of the Vulnerable Software and Affected Versions: Cradlepoint IBR600 NCOS versions 6.5.0.160bc2e and prior Moxa UC-8580 Series version 1.1 Moxa UC-8540 Series versions 1.0 through 1.2 Moxa UC-8410A Series version 2.2 Moxa UC-8200 Series versions 1.0 through 2.4 Moxa UC-8100A-ME-T Series...

CVE-2022-38443 Adobe Dimension GLB File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Adobe Dimension versions 3.4.5 is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a...

CVE-2022-39296 Path traversal in MelisAssetManager

MelisAssetManager provides deliveries of Melis Platform's assets located in every module's public folder. Attackers can read arbitrary files on affected versions of melisplatform/melis-asset-manager, leading to the disclosure of sensitive information. Conducting this attack does not require...

PT-2022-14640 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-10 through Android-13 Description: The issue is caused by a logic error in the code, specifically in the start of Threads.cpp, which allows for the possibility of recording audio during a phone call. This could lead t...

Privilege escalation

In ims, there is a possible escalation of privilege due to a parcel format mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07319095; Issue ID: ALPS07319095...

PT-2022-34650 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.68 Description: The issue is related to a use-after-free in efi capsule write. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

ASB-A-237288416

In audioTransportsToHal of HidlUtils.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PUB-A-211485702

In smcintcrequestfiq of armgic.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

PT-2022-26097 · Bento4 · Bento4

Name of the Vulnerable Software and Affected Versions: Bento4 version 1.6.0-639 Description: A memory leak issue exists in the AP4 StdcFileByteStream::Create function, specifically in the System/StdC/Ap4StdCFileByteStream.cpp file. This issue can lead to memory exhaustion if exploited...

PT-2022-26093 · Xpdf +1 · Xpdf +1

Name of the Vulnerable Software and Affected Versions: Xpdf version 4.04 Description: An issue was discovered that causes a crash in the gfseek IO FILE, long, int function in the goo/gfile.cc file. Recommendations: For Xpdf version 4.04, as a temporary workaround, consider disabling the gfseek...

PT-2022-34255 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.211 Description: The issue concerns a stack-out-of-bound access in SPMI tracing functions. It was introduced in version v4.3 and fixed in Linux Kernel version v5.4.211. The actual impact and attack...

PT-2022-33781 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.63 Description: The issue is related to the bpf and involves not reinitializing the map value in prealloc lru pop. The actual impact and potential for attack have not been proven yet. Recommendations: For...

CVE-2022-30675 Adobe InDesign 2022 Out-of-Bound Read Memory leak

Adobe InDesign versions 16.4.2 and earlier and 17.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...

PT-2022-33233 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.19 through v5.19.7 Description: A use-after-free issue was discovered during the unregister process in the firmware loader. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linu...

PT-2022-33508 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: The issue concerns the soundwire driver bind/unbind and callbacks. It was introduced in version v4.16 and fixed in Linux Kernel version v5.19.2. The actual impact and attack plausibility hav...

PT-2022-25433 · Ansys · Ansys Spaceclaim

Name of the Vulnerable Software and Affected Versions: Ansys SpaceClaim version 2022 R1 Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The fla...

PT-2022-5097 · Cisco · Cisco Ios Xr

Name of the Vulnerable Software and Affected Versions: Cisco IOS XR Software affected versions not specified Description: A vulnerability in the Broadband Network Gateway PPP over Ethernet PPPoE feature of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause the PPPoE...

CVE-2022-20393

In extract3GPPGlobalDescriptions of TextDescriptions.cpp, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure from the media server with no additional execution privileges needed. User interaction is not needed for exploitation.Produc...

Citrix Endpoint Management (aka XenMobile Server) 10.13.0 Rolling Patch 10

Package name: xms10.13.0.11025.bin For: XenMobile Server 10.13.0 Deployment type: On-premises only Replaces: xms10.13.0.10922.bin, xms10.13.0.10817.bin, xms10.13.0.10723.bin, xms10.13.0.10603, xms10.13.0.10528.bin, xms10.13.0.10426.bin, xms10.13.0.10329.bin, xms10.13.0.10212.bin, and...

CVE-2022-26461

In vow, there is a possible undefined behavior due to an API misuse. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07032604; Issue ID: ALPS07032604...