PT-2022-2661 · Microsoft · Visual Studio

Name of the Vulnerable Software and Affected Versions: Microsoft Visual Studio affected versions not specified Description: The issue is related to insufficient access control in Microsoft Visual Studio, allowing an attacker to escalate their privileges. Recommendations: At the moment, there is n...

PT-2022-14323 · Vow · Vow

Name of the Vulnerable Software and Affected Versions: vow affected versions not specified Description: The issue is related to a possible memory corruption due to a race condition, which could lead to local escalation of privilege. System execution privileges are needed for exploitation, and use...

PT-2022-10425 · Qualcomm · Snapdragon Connectivity +7

Name of the Vulnerable Software and Affected Versions: Snapdragon Auto affected versions not specified Snapdragon Compute affected versions not specified Snapdragon Connectivity affected versions not specified Snapdragon Consumer IOT affected versions not specified Snapdragon Industrial IOT...

PT-2022-7715 · Ibm · Blackice Pc Protection

Name of the Vulnerable Software and Affected Versions: ISS BlackICE PC Protection affected versions not specified Description: A vulnerability was found in the Update Handler component of ISS BlackICE PC Protection, allowing cleartext transmission of data. This issue is declared as problematic an...

PT-2022-1968 · Microsoft · Windows Mshtml Platform +1

Name of the Vulnerable Software and Affected Versions: Windows HTML Platforms affected versions not specified Description: The issue is related to errors in security settings, allowing a remote attacker to disclose protected information. It is a security-feature bypass vulnerability that affects...

PT-2022-4891 · D Link · Dlink Router

Name of the Vulnerable Software and Affected Versions: D-Link routers affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of multiple D-Link routers. Authentication is not required to exploit this issue. The...

PT-2022-1799 · Adobe · Commerce +1

Name of the Vulnerable Software and Affected Versions: Magento Commerce affected versions not specified Adobe Commerce affected versions not specified Description: The issue exists due to insufficient input validation in the software platform. This allows a remote attacker to execute arbitrary...

PT-2022-8503 · Drupal · Drupal Quickedit Module

Name of the Vulnerable Software and Affected Versions: Drupal QuickEdit module affected versions not specified Description: The QuickEdit module does not properly check access to fields in some circumstances, which can lead to unintended disclosure of field data. Sites are only affected if the...

PT-2022-13257 · Subiquity · Subiquity

Name of the Vulnerable Software and Affected Versions: Subiquity affected versions not specified Description: The issue concerns Subiquity showing guided storage passphrases in plaintext with read-all permissions. Recommendations: At the moment, there is no information about a newer version that...

PT-2022-1700 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to insecure privilege management in the browser, which could allow an attacker to elevate their privileges. Recommendations: At the moment, there ...

PT-2022-11450

Name of the Vulnerable Software and Affected Versions calibre-web affected versions not specified Description The issue is related to Cross-Site Request Forgery CSRF, which is a type of attack that tricks a user into performing unintended actions on a web application. No information is provided...

PT-2022-1571 · Microsoft · Windows Refs +1

Name of the Vulnerable Software and Affected Versions: Windows Resilient File System ReFS affected versions not specified Description: The issue is related to errors in code generation management in the Resilient File System ReFS of Windows operating systems. It allows remote attackers to execute...

PT-2022-1683 · Microsoft · Windows Resilient File System +1

Name of the Vulnerable Software and Affected Versions: Windows Resilient File System ReFS affected versions not specified Description: The issue is related to incorrect code generation management in the Windows Resilient File System ReFS. It allows remote attackers to execute arbitrary code,...

PT-2022-1568 · Microsoft · Windows Resilient File System +1

Name of the Vulnerable Software and Affected Versions: Windows Resilient File System ReFS affected versions not specified Description: The issue is related to errors in code generation management in the Windows Resilient File System ReFS. It can be exploited by sending a specially crafted request...

PT-2022-1503 · Microsoft · Windows Staterepository Api Server +1

Name of the Vulnerable Software and Affected Versions: Windows StateRepository API Server affected versions not specified Description: The issue is related to insecure privilege management in the Windows StateRepository API Server, which is part of the Windows operating system. This allows an...

PT-2022-1410 · Microsoft · Windows Bind Filter Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Bind Filter Driver affected versions not specified Description: The issue is related to insufficient access control in the Windows Bind Filter Driver, which can be exploited to elevate privileges. This could allow an attacker to affec...

PT-2022-12980 · Vim +5 · Vim +5

Name of the Vulnerable Software and Affected Versions: vim affected versions not specified Description: The issue concerns an Out-of-bounds Read. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents where this...

PT-2021-13311 · Apusys · Apusys

Name of the Vulnerable Software and Affected Versions: apusys affected versions not specified Description: The issue is related to a possible memory corruption due to a missing bounds check in apusys. This could lead to local escalation of privilege with System execution privileges needed. User...

PT-2021-22691 · Google · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel affected versions not specified Description: The issue concerns the Android kernel. No specific details about the nature of the problem or its potential impact are provided. Recommendations: At the moment, there is no informati...

PT-2022-11300 · Shibboleth +1 · Shibboleth Authentication Plugin +1

Name of the Vulnerable Software and Affected Versions: Shibboleth authentication plugin affected versions not specified Description: A session hijack risk was identified in the Shibboleth authentication plugin. Recommendations: At the moment, there is no information about a newer version that...