PT-2022-27404 · Unknown · Rainygao Docsys

Name of the Vulnerable Software and Affected Versions: RainyGao DocSys affected versions not specified Description: A critical issue has been found in RainyGao DocSys, affecting an unknown functionality of the component com.DocSystem.controller.UserControllergetUserImg. The manipulation leads to...

PT-2022-27849

Name of the Vulnerable Software and Affected Versions Mbed TLS versions prior to 2.28.2 Mbed TLS versions 3.x prior to 3.3.0 Description An issue allows an adversary with access to precise enough information about memory accesses to recover an RSA private key after observing the victim performing...

PT-2022-27146 · Beijing Zed 3 Technologies Co. · Voip Simpliclty Asg

Name of the Vulnerable Software and Affected Versions: Beijing Zed-3 Technologies Co.,Ltd VoIP simpliclty ASG version 8.5.0.17807 Description: The issue is related to a weak password, which can potentially be exploited. There is no information provided about the estimated number of affected devic...

PT-2022-25133 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about a specific vulnerability. It appears to be a notification about a rejected candidate...

PT-2022-10925 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 through Android-12L Description: The issue allows for a tapjacking/overlay attack in the user interface buttons of PermissionController, potentially leading to local escalation of privilege without requiring...

PT-2022-20267 · Unknown · Quanos Schema St4

Name of the Vulnerable Software and Affected Versions: Quanos SCHEMA ST4 versions Bootstrap 2019 v2 through 2022 SP1 v1 Description: The issue allows a remote attacker to perform JavaScript injection, potentially hijacking existing sessions to access other web services in the same environment or...

PT-2022-22089 · Apache · Apache Atlas

Name of the Vulnerable Software and Affected Versions: Apache Atlas versions 0.8.4 through 2.2.0 Description: A vulnerability in the import module of Apache Atlas allows an authenticated user to write to the web server filesystem. Recommendations: For Apache Atlas versions 0.8.4 through 2.2.0,...

PT-2022-27320 · D Link · D-Link Dir-3040

Name of the Vulnerable Software and Affected Versions: D-Link DIR-3040 version 120B03 Description: A command injection issue was discovered in the D-Link DIR-3040 device. The vulnerability is related to the SetTriggerLEDBlink function, which allows for command injection. Recommendations: For D-Li...

Driver Disk for Microsemi smartpqi 2.1.20-035 - For Citrix Hypervisor 8.2 LTSR

Who Should Install this Driver Disk? Customers running the Citrix Hypervisor 8.2 LTSR release who use Microsemi's smartpqi driver and wish to use the latest version of the following: Driver Module| Version ---|--- smartpqi| 2.1.20-035 Issues Resolved In this Driver Disk Includes general...

PT-2022-26878 · Ibm · Aix +2

Name of the Vulnerable Software and Affected Versions: IBM AIX versions 7.1 through 7.3 VIOS version 3.1 Description: The issue allows a non-privileged local user to exploit a vulnerability in the AIX NFS kernel extension to cause a denial of service. Recommendations: For IBM AIX versions 7.1...

PT-2022-27794 · Github · Github Enterprise Server

Name of the Vulnerable Software and Affected Versions: GitHub Enterprise Server version 3.7.0 Description: An improper limitation of a pathname to a restricted directory was identified, enabling remote code execution. A check was added within Pages to ensure the working directory is clean before...

PT-2022-27334 · Scifio · Scifio

Name of the Vulnerable Software and Affected Versions: scifio affected versions not specified Description: A critical vulnerability was found in scifio, affecting the function downloadAndUnpackResource of the file src/test/java/io/scif/util/DefaultSampleFilesService.java of the component ZIP File...

PT-2022-27110 · WordPress · Permalink Manager Lite

Name of the Vulnerable Software and Affected Versions: Permalink Manager Lite plugin for WordPress versions up to, and including 2.2.20.3 Description: The issue arises from improper output escaping on post/page/media titles, allowing Stored Cross-Site Scripting attacks. This enables attackers to...

PT-2022-21598 · Apple · Ios +3

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 16.2 iPadOS versions prior to 16.2 macOS Ventura versions prior to 13.1 Description: The issue allows a deleted photo to be re-surfaced without authentication through the shake-to-undo feature. This was addressed with...

PT-2022-5988 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.14 and earlier Description: The issue is a reflected Cross-Site Scripting XSS vulnerability. It can be exploited if an attacker convinces a victim to visit a URL referencing a vulnerable page, allowing...

PT-2022-5996 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.14 and earlier Description: The issue is a reflected Cross-Site Scripting XSS vulnerability. It can be exploited if an attacker convinces a victim to visit a URL referencing a vulnerable page, allowing...

PT-2022-27693 · Mendix · Mendix Email Connector

Name of the Vulnerable Software and Affected Versions: Mendix Email Connector versions prior to 2.0.0 Description: A vulnerability has been identified in the handling of access control for some module entities. This could allow authenticated remote attackers to read and manipulate sensitive...

PT-2022-26281 · Delta Electronics · Delta Electronics Dx-2100-L1-Cn

Name of the Vulnerable Software and Affected Versions: Delta Electronics DX-2100-L1-CN version 2.42 Description: The issue is related to Cross Site Scripting XSS via lform/urlfilter. This means that an attacker could potentially inject malicious scripts into the website, allowing them to steal us...

PT-2022-7453

Name of the Vulnerable Software and Affected Versions rails-html-sanitizer versions prior to 1.4.4 Description The issue is related to a possible XSS vulnerability in certain configurations of Rails::Html::Sanitizer, which may allow an attacker to inject content if the application developer has...

PT-2022-27796 · Siemens · Polarion Alm

Name of the Vulnerable Software and Affected Versions: Polarion ALM versions prior to V2304.0 Description: A Host header injection issue has been identified, which could allow an attacker to spoof Host header information and redirect users to malicious websites. Recommendations: For versions prio...