PT-2022-13257 · Subiquity · Subiquity

Name of the Vulnerable Software and Affected Versions: Subiquity affected versions not specified Description: The issue concerns Subiquity showing guided storage passphrases in plaintext with read-all permissions. Recommendations: At the moment, there is no information about a newer version that...

PT-2022-1700 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to insecure privilege management in the browser, which could allow an attacker to elevate their privileges. Recommendations: At the moment, there ...

PT-2022-11450

Name of the Vulnerable Software and Affected Versions calibre-web affected versions not specified Description The issue is related to Cross-Site Request Forgery CSRF, which is a type of attack that tricks a user into performing unintended actions on a web application. No information is provided...

PT-2022-1410 · Microsoft · Windows Bind Filter Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Bind Filter Driver affected versions not specified Description: The issue is related to insufficient access control in the Windows Bind Filter Driver, which can be exploited to elevate privileges. This could allow an attacker to affec...

PT-2022-1503 · Microsoft · Windows Staterepository Api Server +1

Name of the Vulnerable Software and Affected Versions: Windows StateRepository API Server affected versions not specified Description: The issue is related to insecure privilege management in the Windows StateRepository API Server, which is part of the Windows operating system. This allows an...

PT-2022-1571 · Microsoft · Windows Refs +1

Name of the Vulnerable Software and Affected Versions: Windows Resilient File System ReFS affected versions not specified Description: The issue is related to errors in code generation management in the Resilient File System ReFS of Windows operating systems. It allows remote attackers to execute...

PT-2022-1683 · Microsoft · Windows Resilient File System +1

Name of the Vulnerable Software and Affected Versions: Windows Resilient File System ReFS affected versions not specified Description: The issue is related to incorrect code generation management in the Windows Resilient File System ReFS. It allows remote attackers to execute arbitrary code,...

PT-2022-1568 · Microsoft · Windows Resilient File System +1

Name of the Vulnerable Software and Affected Versions: Windows Resilient File System ReFS affected versions not specified Description: The issue is related to errors in code generation management in the Windows Resilient File System ReFS. It can be exploited by sending a specially crafted request...

PT-2022-12980 · Vim +5 · Vim +5

Name of the Vulnerable Software and Affected Versions: vim affected versions not specified Description: The issue concerns an Out-of-bounds Read. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents where this...

PT-2021-13311 · Apusys · Apusys

Name of the Vulnerable Software and Affected Versions: apusys affected versions not specified Description: The issue is related to a possible memory corruption due to a missing bounds check in apusys. This could lead to local escalation of privilege with System execution privileges needed. User...

PT-2021-22691 · Google · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel affected versions not specified Description: The issue concerns the Android kernel. No specific details about the nature of the problem or its potential impact are provided. Recommendations: At the moment, there is no informati...

PT-2022-11300 · Shibboleth +1 · Shibboleth Authentication Plugin +1

Name of the Vulnerable Software and Affected Versions: Shibboleth authentication plugin affected versions not specified Description: A session hijack risk was identified in the Shibboleth authentication plugin. Recommendations: At the moment, there is no information about a newer version that...

PT-2021-5548 · Busybox +5 · Busybox +5

Name of the Vulnerable Software and Affected Versions: BusyBox affected versions not specified Description: A use-after-free issue in BusyBox's awk applet can lead to denial of service and possibly code execution when processing a crafted awk pattern in the getvar i function. This could allow a...

PT-2021-22374 · Octorpki +1 · Octorpki +1

Name of the Vulnerable Software and Affected Versions: OctoRPKI affected versions not specified Description: The issue allows for a slowloris DOS attack to take place, making OctoRPKI wait forever. This occurs because OctoRPKI does not limit the length of a connection. Specifically, the repositor...

PT-2021-5298 · Microsoft · Dynamics 365 On-Premises

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 On-Premises affected versions not specified Description: The issue is related to incorrect code generation management in Microsoft Dynamics 365, which can be exploited by a remote attacker using a specially crafted...

PT-2021-22728 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE affected versions not specified Description: The issue allows anonymous users to retrieve information about any GitLab user, given a user ID, by utilizing certain endpoints. Recommendations: At the moment, there is no information...

PT-2021-21940 · Taro · Taro

Name of the Vulnerable Software and Affected Versions: taro affected versions not specified Description: The issue is related to Inefficient Regular Expression Complexity. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents...

PT-2021-20191 · Geutebrück · Camera Devices

Name of the Vulnerable Software and Affected Versions: Camera devices by UDP Technology, Geutebrück and other vendors affected versions not specified Description: The issue concerns command injection, which may allow an attacker to remotely execute arbitrary code. This affects multiple camera...

PT-2021-7634 · Microsoft · Edge For Android

Name of the Vulnerable Software and Affected Versions: Microsoft Edge for Android affected versions not specified Description: The issue is related to a lack of protection for internal data in Microsoft Edge for Android. Exploitation of this issue could allow a remote attacker to elevate their...

PT-2021-24125

Name of the Vulnerable Software and Affected Versions: Ivanti Endpoint Manager Cloud Service Appliance EPM CSA affected versions not specified Description: A code injection vulnerability in the Ivanti EPM Cloud Services Appliance CSA allows an unauthenticated user to execute arbitrary code with...