PT-2022-14674 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to Android-13 Description: The issue is related to a possible method arbitrary code execution due to a confused deputy in the initializeFromParcelLocked method of BaseBundle.java. This could lead to local escalation of...

PT-2022-27315 · Firstobject · Object First Ootbi Beta

Name of the Vulnerable Software and Affected Versions: Object First Ootbi BETA versions 1.0.7.712 through 1.0.13.1610 Description: A flaw was found in the Web Service, which could lead to local information disclosure. The command that creates the URL for the support bundle uses an insecure RNG,...

PT-2022-26863 · Unknown · Sanitization Management System

Name of the Vulnerable Software and Affected Versions: Sanitization Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/php-sms/classes/Master.php?f=delete quote" endpoint...

PT-2022-27314 · Unknown · Object First Ootbi Beta

Name of the Vulnerable Software and Affected Versions: Object First Ootbi BETA versions 1.0.7.712 through 1.0.13.1610 Description: An issue was discovered in the management protocol, allowing a remote attacker to execute arbitrary Bash code with root privileges. The command that sets the hostname...

PT-2022-26734 · Unknown · Online Tours & Travels Management System

Name of the Vulnerable Software and Affected Versions: Online Tours & Travels Management System version 1.0 Description: The issue is related to an arbitrary file upload vulnerability in the /operations/travellers.php component. This allows attackers to execute arbitrary code via a crafted PHP...

PT-2022-26754 · Tenda · Tenda Ac23

Name of the Vulnerable Software and Affected Versions: Tenda AC23 version 16.03.07.45 cn Description: A stack overflow issue was discovered via the wpapsk crypto parameter in the fromSetWirelessRepeat function. This issue may allow for exploitation, potentially leading to unauthorized access or...

PT-2022-26753 · Tenda · Tenda Ac23

Name of the Vulnerable Software and Affected Versions: Tenda AC23 version 16.03.07.45 cn Description: A stack overflow issue was discovered via the list parameter in the formSetQosBand function. Recommendations: For Tenda AC23 version 16.03.07.45 cn, consider restricting access to the...

CVE-2022-39234 user session persists even after permanently deleting account in GLPI

GLPI stands for Gestionnaire Libre de Parc Informatique. GLPI is a Free Asset and IT Management Software package that provides ITIL Service Desk features, licenses tracking and software auditing. Deleted/deactivated user could continue to use their account as long as its cookie is valid. This iss...

PT-2022-24937 · Glpi +1 · Glpi +1

Name of the Vulnerable Software and Affected Versions: GLPI versions prior to 10.0.4 Description: The issue concerns the improper neutralization of script related HTML tags in assets inventory information. This has been patched, and an upgrade is recommended. There are no known workarounds at thi...

PT-2022-26751 · Tenda · Tenda Ac23

Name of the Vulnerable Software and Affected Versions: Tenda AC23 version 16.03.07.45 cn Description: A stack overflow issue was discovered via the devName parameter in the formSetDeviceName function. This issue can be exploited, potentially allowing attackers to execute arbitrary code...

PT-2022-5353 · Mozilla +10 · Firefox +10

Name of the Vulnerable Software and Affected Versions: Pixman versions prior to 0.42.2 Description: The issue is related to an out-of-bounds write, also known as a heap-based buffer overflow, in the rasterize edges 8 function of the Pixman library. This occurs due to an integer overflow in pixman...

PT-2022-26752 · Tenda · Tenda Ac23

Name of the Vulnerable Software and Affected Versions: Tenda AC23 version 16.03.07.45 cn Description: A stack overflow issue was discovered via the timeZone parameter in the fromSetSysTime function. Recommendations: For Tenda AC23 version 16.03.07.45 cn, as a temporary workaround, consider...

PT-2022-24835 · Discourse · Discourse

Name of the Vulnerable Software and Affected Versions: Discourse versions prior to the latest stable, beta, and test-passed versions Description: A malicious admin could exploit this issue to perform port enumeration on the local host or other hosts on the internal network, as well as against hos...

PT-2022-26865 · Unknown · Sanitization Management System

Name of the Vulnerable Software and Affected Versions: Sanitization Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/admin/?page=orders/manage request" API endpoint. Recommendations:...

PT-2022-26798 · Open5Gs · Open5Gs

Name of the Vulnerable Software and Affected Versions: open5gs version 2.4.11 Description: The issue is related to a memory leak in the component src/upf/pfcp-path.c, which allows attackers to cause a Denial of Service DoS via a crafted PFCP packet. Recommendations: For open5gs version 2.4.11,...

PT-2022-26800 · Open5Gs · Open5Gs

Name of the Vulnerable Software and Affected Versions: open5gs version 2.4.11 Description: The issue is related to a memory leak in the ngap-handler.c component. This allows attackers to cause a Denial of Service DoS via a crafted UE attachment. Recommendations: For open5gs version 2.4.11, consid...

PT-2022-26741 · Unknown · Web-Based Student Clearance System

Name of the Vulnerable Software and Affected Versions: Web-Based Student Clearance System version 1.0 Description: A cross-site scripting XSS issue exists in the /admin/add-fee.php endpoint, allowing attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the cmddep...

PT-2022-25324 · Php Point Of Sale Llc +1 · Php Point Of Sale

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The application is affected by an authenticated Stored Cross-Site Scripting XSS issue in the upload and download functionality. This could allow attackers to escalate privileges or...

PT-2022-21773 · WordPress · Easy Wp Smtp

Name of the Vulnerable Software and Affected Versions: Easy WP SMTP WordPress plugin versions prior to 1.5.0 Description: The issue arises from the unserialization of the content of an imported file, potentially leading to a PHP object injection issue. This can occur when an admin imports a...

PT-2022-21356

Name of the Vulnerable Software and Affected Versions WordPress Classifieds Plugin versions prior to 4.3 Description The issue arises from the improper sanitization and escaping of certain parameters before they are used in a SQL statement. This occurs via an AJAX action that is accessible to...