CVE-2022-3564

A vulnerability classified as critical was found in Linux Kernel. Affected by this vulnerability is the function l2capreassemblesdu of the file net/bluetooth/l2capcore.c of the component Bluetooth. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. The...

CVE-2022-3533

A vulnerability was found in Linux Kernel. It has been rated as problematic. This issue affects the function parseusdtarg of the file tools/lib/bpf/usdt.c of the component BPF. The manipulation of the argument regname leads to memory leak. It is recommended to apply a patch to fix this issue. The...

PT-2022-21872 · Hiwin · Hiwin Robot System

Name of the Vulnerable Software and Affected Versions: HIWIN Robot System Software version 3.3.21.9869 Description: The issue arises from the software's failure to properly address the terminated command source. This allows an attacker to craft code that can disconnect the HIWIN Robot System...

CVE-2022-3553 X.org Server xquartz X11Controller.m denial of service

A vulnerability, which was classified as problematic, was found in X.org Server. This affects an unknown part of the file hw/xquartz/X11Controller.m of the component xquartz. The manipulation leads to denial of service. It is recommended to apply a patch to fix this issue. The identifier VDB-2110...

Memory corruption

A vulnerability classified as problematic was found in Linux Kernel. This vulnerability affects the function macvlanhandleframe of the file drivers/net/macvlan.c of the component skb. The manipulation leads to memory leak. The attack can be initiated remotely. It is recommended to apply a patch t...

PT-2022-25919 · Unknown · Online Diagnostic Lab Management System

Name of the Vulnerable Software and Affected Versions: Online Diagnostic Lab Management System version 1.0 Description: The issue allows attackers to execute arbitrary code via a crafted PHP file, leveraging an arbitrary file upload vulnerability in the /php action/editProductImage.php component...

PT-2022-26240 · Tenda · Tenda Ac1206

Name of the Vulnerable Software and Affected Versions: Tenda AC1206 version US AC1206V1.0RTL V15.03.06.23 multi TD01 Description: A stack overflow issue was discovered via the function formWifiBasicSet. Recommendations: For Tenda AC1206 version US AC1206V1.0RTL V15.03.06.23 multi TD01, consider...

PT-2022-25258 · Siemens · Desigo Pxm40-1 +9

Name of the Vulnerable Software and Affected Versions: Desigo PXM30-1 versions prior to V02.20.126.11-41 Desigo PXM30.E versions prior to V02.20.126.11-41 Desigo PXM40-1 versions prior to V02.20.126.11-41 Desigo PXM40.E versions prior to V02.20.126.11-41 Desigo PXM50-1 versions prior to...

PT-2022-6045 · Linux +8 · Linux Kernel +8

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to 6.2 Description: A regression exists in the Linux Kernel within KVM: nVMX that allowed for speculative execution attacks. L2 can carry out Spectre v2 attacks on L1 due to L1 thinking it doesn't need retpolines o...

PT-2022-24628 · Iegeek · Iegeek Ig20 Hipcam Realserver

Name of the Vulnerable Software and Affected Versions: ieGeek IG20 hipcam RealServer version V1.0 Description: The algorithm used to generate device IDs UIDs for devices that utilize Shenzhen Yunni Technology iLnkP2P suffers from a predictability flaw, allowing remote attackers to establish direc...

PT-2022-25199 · Unknown · Online Tours & Travels Management System

Name of the Vulnerable Software and Affected Versions: Online Tours & Travels Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/admin/update currency.php" API endpoint. Recommendation...

PT-2022-25752 · Jenkins · Jenkins Dotci Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins DotCi Plugin versions 2.40.00 and earlier Description: The issue arises from the Jenkins DotCi Plugin not configuring its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability...

PT-2022-19489 · Yetiforce · Yetiforcecrm

Name of the Vulnerable Software and Affected Versions: YetiForce CRM versions prior to 6.3 YetiForce CRM versions 6.4.0 and prior Description: The issue is related to Cross-site Scripting XSS - Stored, which affects the GitHub repository yetiforcecompany/yetiforcecrm. The WidgetsManagement module...

PT-2022-24592 · Unknown · School Activity Updates With Sms Notification

Name of the Vulnerable Software and Affected Versions: School Activity Updates with SMS Notification version 1.0 Description: The issue is related to SQL Injection, which can be exploited via the "/activity/admin/modules/modstudent/index.php?view=view&id=" endpoint. The id variable is vulnerable ...

PT-2022-33446 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: The issue concerns a potential security vulnerability in the Linux Kernel. It was introduced in version v5.12 and fixed in version v5.19.2. The actual impact and attack plausibility have not...

PT-2022-25440 · Ansys · Ansys Spaceclaim

Name of the Vulnerable Software and Affected Versions: Ansys SpaceClaim version 2022 R1 Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The fla...

PT-2022-25320 · Samsung · Samsung Tizenrt

Name of the Vulnerable Software and Affected Versions: Samsung TizenRT versions 3.0 GBM through 3.1 PRE Description: An issue in the cyassl connect step2 function in curl/vtls/cyassl.c leads to information disclosure due to a missing X509 free after SSL get peer certificate. Recommendations: For...

PT-2022-23491 · Tenda · Tenda G3

Name of the Vulnerable Software and Affected Versions: Tenda G3 version US G3V3.0br V15.11.0.67663 EN TDE Description: The issue is caused by a buffer overflow vulnerability due to the use of sprintf in a function within the httpd binary. Recommendations: For Tenda G3 version US G3V3.0br...

PT-2022-5379 · Exim +1 · Exim +1

Name of the Vulnerable Software and Affected Versions: Exim affected versions not specified Description: The issue affects the function dmarc dns lookup of the file dmarc.c of the component DMARC Handler. This is related to a use after free condition, which can be exploited by a remote attacker t...

PT-2022-5331 · Exim +4 · Exim +4

Name of the Vulnerable Software and Affected Versions: Exim affected versions not specified Description: A vulnerability was found in Exim, affecting the Regex Handler component. This issue leads to use after free, potentially allowing a remote attacker to cause a denial of service or gain access...