PT-2022-27587 · Tenda · Tenda Ac6

Name of the Vulnerable Software and Affected Versions: Tenda AC6V1.0 version 15.03.05.19 Description: A buffer overflow issue was discovered via the limitSpeedUp parameter in the formSetClientState function. This issue allows for potential exploitation. No information is provided about the...

PT-2022-25849 · Perfsonar · Perfsonar

Name of the Vulnerable Software and Affected Versions: perfSONAR versions 4.4.5 and prior Description: An issue in the graphData.cgi component allows attackers to access sensitive data and execute Server-Side Request Forgery SSRF attacks. Recommendations: For versions 4.4.5 and prior, consider...

PT-2022-6503 · Wind River · Vxworks

Name of the Vulnerable Software and Affected Versions: Wind River VxWorks versions 6.9 through 7 Description: The issue allows a specifically crafted packet sent by a Radius server to cause Denial of Service during the IP Radius access procedure. This is related to the execution of a loop with an...

PT-2022-27433 · Unknown · Jeecg-Boot

Name of the Vulnerable Software and Affected Versions: Jeecg-boot version 3.4.3 Description: A SQL injection issue was discovered in Jeecg-boot via the component updateNullByEmptyString. This allows for potential exploitation. Recommendations: For Jeecg-boot version 3.4.3, consider restricting...

PT-2022-23217 · Epson · Epson Tm-C7500 +1

Name of the Vulnerable Software and Affected Versions: Epson TM-C3500 version WAM31500 Epson TM-C7500 version WAM31500 Description: The WebConfig functionality of the devices allows authentication bypass. Recommendations: For Epson TM-C3500 version WAM31500, consider disabling the WebConfig...

PT-2022-27436 · Unknown · Jeecg-Boot

Name of the Vulnerable Software and Affected Versions: Jeecg-boot version 3.4.3 Description: A SQL injection issue was found in the /sys/user/deleteRecycleBin component. This could potentially allow an attacker to inject malicious SQL code. Recommendations: For Jeecg-boot version 3.4.3, consider...

PT-2022-27469 · Aerocms · Aerocms

Name of the Vulnerable Software and Affected Versions: AeroCMS version 0.0.1 Description: The issue allows attackers to access database information through a SQL Injection vulnerability via the Category parameter at the "category.php" endpoint. This vulnerability enables unauthorized access to...

PT-2022-27136 · Tenda · Tenda Ac18

Name of the Vulnerable Software and Affected Versions: Tenda AC18 version 15.03.05.19 Description: The issue is related to a Buffer Overflow that can be triggered via the fromSetRouteStatic function. Recommendations: For Tenda AC18 version 15.03.05.19, consider disabling the fromSetRouteStatic...

PT-2022-27132 · Tenda · Tenda Ac18

Name of the Vulnerable Software and Affected Versions: Tenda AC18 version 15.03.05.19 Description: The issue is related to a Buffer Overflow that can be triggered via the form fast setting wifi set function. This can potentially allow for unauthorized access or code execution. Recommendations: Fo...

PT-2022-27309 · Unknown · Appalti & Contratti

Name of the Vulnerable Software and Affected Versions: Appalti & Contratti version 9.12.2 Description: An issue was discovered in the target web applications, allowing Local File Inclusion in any page relying on the href parameter to specify the JSP page to be rendered. This affects ApriPagina.do...

PT-2022-27213 · Unknown · Automotive Shop Management System

Name of the Vulnerable Software and Affected Versions: Automotive Shop Management System version 1.0 Description: The issue is related to SQL Injection, which can be exploited via the /asms/classes/Master.php?f=delete transaction endpoint. This allows for potential unauthorized access and...

PT-2022-27098 · Unknown · Zenario Cms

Name of the Vulnerable Software and Affected Versions: Zenario CMS version 9.3.57186 Description: The issue is related to Cross Site Scripting XSS via News articles. This means that an attacker could potentially inject malicious scripts into news articles, which could then be executed by users'...

PT-2022-26762 · Intelliants · Intelliants Subrion Cms

Name of the Vulnerable Software and Affected Versions: Intelliants Subrion CMS version 4.2.1 Description: A cross-site scripting XSS issue in the "/panel/fields/add" component allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Field default value tex...

PT-2022-5519 · Microsoft · Sharepoint Server +5

Name of the Vulnerable Software and Affected Versions: Microsoft Office affected versions not specified Microsoft 365 Apps for Enterprise affected versions not specified Microsoft SharePoint affected versions not specified Microsoft Excel affected versions not specified Microsoft Office Web Apps...

PT-2022-27180 · Picoc · Picoc

Name of the Vulnerable Software and Affected Versions: PicoC version 3.2.2 Description: A heap buffer overflow was discovered in the LexGetStringConstant function in lex.c when called from LexScanGetToken. This issue affects PicoC. Recommendations: For PicoC version 3.2.2, consider disabling the...

PT-2022-27388 · Tenda · Tenda Ax12

Name of the Vulnerable Software and Affected Versions: Tenda AX12 version V22.03.01.16 cn Description: The issue is related to command injection via the goform/fast setting internet set API endpoint. This allows for potential malicious commands to be executed. Recommendations: For Tenda AX12...

PT-2022-10669 · Unknown · Employee Record Management System

Name of the Vulnerable Software and Affected Versions: Employee Record Management System version 1.2 Description: The issue is related to SQL Injection via the editempprofile.php file. Recommendations: For Employee Record Management System version 1.2, consider restricting access to the...

PT-2022-26785 · Unknown · Rukovoditel

Name of the Vulnerable Software and Affected Versions: Rukovoditel version 3.2.1 Description: A SQL injection issue was discovered, which can be exploited via the reports id parameter. Recommendations: For Rukovoditel version 3.2.1, consider restricting access to the reports id parameter until a...

PT-2022-26038 · Unknown · Markdownify

Name of the Vulnerable Software and Affected Versions: Markdownify version 1.4.1 Description: The issue allows an external attacker to execute arbitrary code remotely on any client attempting to view a malicious markdown file through Markdownify. This is possible because the application has the...

PT-2022-20302 · Unknown +2 · Zoneminder +2

Name of the Vulnerable Software and Affected Versions: ZoneMinder version 1.36.12 Description: A Stored Cross Site Scripting XSS issue allows an attacker to execute HTML or JavaScript code via the Username field when an Admin or non-Admin users that can see other users logged into the platform...