PT-2022-20021 · WordPress · Slickr Flickr Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: Slickr Flickr WordPress plugin versions through 2.8.1 Description: The issue allows high privilege users, such as admins, to perform cross-Site Scripting attacks due to the lack of sanitization and escaping of its settings. This can occur eve...

PT-2022-24607 · Pypi · Democritus-Strings +1

Name of the Vulnerable Software and Affected Versions: d8s-json version 0.1.0 Description: The d8s-json for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-strings package. Recommendations: For version 0.1.0,...

PT-2022-25489 · Nokia · Nokia 1350 Oms

Name of the Vulnerable Software and Affected Versions: NOKIA 1350OMS version R14.2 Description: An issue exists in the software, where multiple Relative Path Traversal issues are present in different specific endpoints via the file parameter. This allows a remote authenticated attacker to read...

PT-2022-18220 · WordPress · Cg Scroll To Top

Name of the Vulnerable Software and Affected Versions: Scroll To Top WordPress plugin versions prior to 1.4.1 Description: The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks, even when the unfiltered html capability is disallowed, for example, in...

PT-2022-37378 · Pypi · Democritus-Networking +1

Name of the Vulnerable Software and Affected Versions: d8s-ip-addresses version 0.1.0 Description: The d8s-ip-addresses package for python, distributed on PyPI, contains a potential code-execution backdoor. This backdoor is attributed to the democritus-networking package, which was inserted by a...

PT-2022-24609 · Unknown · Democritus-Strings +1

Name of the Vulnerable Software and Affected Versions: d8s-grammars version 0.1.0 Description: The d8s-grammars for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-strings package. Recommendations: For version...

PT-2022-34033 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.138 Description: A memory leak was discovered in an error handling path. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to v5.10.138,...

PT-2022-33996 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.140 Description: The issue is related to an error exit in the privcmd ioctl dm op function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2022-34065 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.137 Description: The issue is related to the net sched: cls route component. It has been noted that when the handle is 0, removal from the list is affected. The actual impact and potential for attack have...

PT-2022-34041 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to 5.10.138 Description: A potential security issue has been identified, related to a use-after-free condition in the cdns3 USB driver. The actual impact and attack plausibility have not yet been proven...

PT-2022-33981 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 5.10.138 through 5.10.141 Description: A potential security issue exists in the Linux Kernel, related to the bpf and cgroup subsystems. The issue is associated with a kernel BUG in purge effective progs. The actual impac...

PT-2022-34024 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.138 Description: A refcount leak bug was found in the ucc uart.c file. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to v5.10.138,...

PT-2022-33775 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.63 Description: The issue is related to a refcount leak in the nmk pinctrl dt subnode to map function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2022-34561 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.9.326 Description: A refcount leak bug was discovered in the ohci-ppc-of module of the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2022-34572 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.9.326 Description: The issue is related to a warning in the cpuinfo for CONFIG CPUMASK OFFSTACK. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2022-33766 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.63 Description: A potential buffer overflow issue exists due to the use of snprintf in the ASoC: SOF: debug component. The actual impact and attack plausibility have not yet been proven. Recommendations: F...

PT-2022-34412 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.256 Description: A potential refcount leak was discovered in the if usb probe function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior ...

PT-2022-34517 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.291 Description: A potential use after free issue has been identified. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to v4.14.291,...

PT-2022-33980 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 4.18 through 5.10.141 Description: A potential security issue exists due to a defer destroy workqueue call in the ieee802154/adf7242 module. The actual impact and attack plausibility have not yet been proven...

PT-2022-33894 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.61 Description: The issue is related to the registration of an irq at the end of a probe. The actual impact and attack plausibility have not yet been proven. It was introduced in version v4.7 and fixed in...