PT-2022-27693 · Mendix · Mendix Email Connector

Name of the Vulnerable Software and Affected Versions: Mendix Email Connector versions prior to 2.0.0 Description: A vulnerability has been identified in the handling of access control for some module entities. This could allow authenticated remote attackers to read and manipulate sensitive...

PT-2022-26281 · Delta Electronics · Delta Electronics Dx-2100-L1-Cn

Name of the Vulnerable Software and Affected Versions: Delta Electronics DX-2100-L1-CN version 2.42 Description: The issue is related to Cross Site Scripting XSS via lform/urlfilter. This means that an attacker could potentially inject malicious scripts into the website, allowing them to steal us...

PT-2022-5996 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.14 and earlier Description: The issue is a reflected Cross-Site Scripting XSS vulnerability. It can be exploited if an attacker convinces a victim to visit a URL referencing a vulnerable page, allowing...

PT-2022-5959 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.14 and earlier Description: The issue is related to a reflected Cross-Site Scripting XSS vulnerability. It can be exploited if an attacker convinces a victim to visit a URL referencing a vulnerable page,...

PT-2022-6006 · Adobe · Illustrator

Name of the Vulnerable Software and Affected Versions: Adobe Illustrator versions 26.5.1 and earlier Adobe Illustrator versions 27.0 and earlier Description: The issue is related to an out-of-bounds read in memory, which could allow an attacker to disclose sensitive information using a specially...

PT-2022-6399 · Schneider Electric · Apc Easy Ups Online Monitoring +1

Name of the Vulnerable Software and Affected Versions: APC Easy UPS Online Monitoring Software versions prior to V2.5-GA APC Easy UPS Online Monitoring Software versions prior to V2.5-GA-01-22261 Schneider Electric Easy UPS Online Monitoring Software versions prior to V2.5-GS Schneider Electric...

PT-2022-27777 · Tuleap · Tuleap

Name of the Vulnerable Software and Affected Versions: Tuleap versions prior to 14.2.99.104 Tuleap Community Edition version 14.2.99.104 Tuleap Enterprise Edition version 14.2-4 Tuleap Enterprise Edition version 14.1-5 Description: Tuleap is an Open Source Suite to improve management of software...

PT-2022-5971

Name of the Vulnerable Software and Affected Versions Microsoft Office Visio affected versions not specified Description The issue is related to a use-after-free vulnerability in Microsoft Office Visio, which can be exploited by using a specially crafted DWG file. This can allow an attacker to...

PT-2022-5856 · Microsoft · Office Graphics

Name of the Vulnerable Software and Affected Versions: Microsoft Office Graphics versions affected versions not specified Description: The issue is related to a use-after-free vulnerability in the Microsoft Office Graphics component, which can be exploited by an attacker to execute arbitrary code...

PT-2022-27727 · Unknown · Gym Management System

Name of the Vulnerable Software and Affected Versions: Gym Management System version 0.0.1 Description: The issue is related to Cross Site Request Forgery CSRF, which is a type of attack that tricks a user into performing unintended actions on a web application. Recommendations: For Gym Managemen...

PT-2022-16045

Name of the Vulnerable Software and Affected Versions Loofah versions 2.1.0 through 2.19.0 Description The issue concerns a cross-site scripting vulnerability via the image/svg+xml media type in data URIs. This vulnerability affects Loofah, a library for manipulating and transforming HTML/XML...

PT-2022-16048

Name of the Vulnerable Software and Affected Versions rails-html-sanitizer versions prior to 1.4.4 Description The issue is related to the sanitization of HTML fragments in Rails applications. Prior to version 1.4.4, there is a possible XSS vulnerability with certain configurations of...

PT-2022-7454

Name of the Vulnerable Software and Affected Versions rails-html-sanitizer versions 1.0.3 through 1.4.3 Description The issue is related to the sanitization of HTML fragments in Rails applications when used in combination with Loofah. It allows a remote attacker to conduct cross-site scripting...

PT-2022-6002 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.14 and earlier Description: The issue is related to a reflected Cross-Site Scripting XSS vulnerability. It occurs due to inadequate protection of the web page structure, allowing a remote attacker to...

PT-2022-5853 · Microsoft · 365 Apps For Enterprise +1

Name of the Vulnerable Software and Affected Versions: Microsoft Office versions affected versions not specified Microsoft 365 Apps for Enterprise versions affected versions not specified Description: The issue is related to insufficient input validation in a component of Microsoft Office and...

PT-2022-16014 · Mediawiki +1 · Mediawiki +1

Name of the Vulnerable Software and Affected Versions: Tuleap versions prior to 14.2.99.148 Tuleap Community Edition version 14.2.99.148 Tuleap Enterprise Edition version 14.2-5 Tuleap Enterprise Edition version 14.1-6 Description: Tuleap is an Open Source Suite to improve management of software...

PT-2022-25781 · Sap · Sap Netweaver Process Integration

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Process Integration PI version 7.50 Description: An unauthenticated attacker over the network can attach to an open interface exposed through JNDI by the User Defined Search UDS and make use of an open naming and directory API t...

PT-2022-16046

Name of the Vulnerable Software and Affected Versions Loofah versions 2.2.0 through 2.19.0 Description Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri. It uses recursion for sanitizing CDATA sections, making it susceptible t...

PT-2022-16044

Name of the Vulnerable Software and Affected Versions Loofah versions prior to 2.19.1 Description Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri. It contains an inefficient regular expression that is susceptible to excessiv...

PT-2022-24713 · WordPress · Helloprint Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: Helloprint WordPress plugin versions prior to 1.4.7 Description: The issue is related to a Reflected Cross-Site Scripting problem. It occurs because a parameter is not properly sanitised and escaped before being outputted back in the page...