PT-2022-27937 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue. It appears to be a notification about a candidate number that is not in use...

PT-2022-8378 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue. It appears to be a notification about a candidate number that is not in use...

PT-2022-6692 · Zoho · Zoho Manageengine Pam360 +2

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine Access Manager Plus versions prior to 4309 Zoho ManageEngine Password Manager Pro versions prior to 12210 Zoho ManageEngine PAM360 versions prior to 5801 Description: The issue is related to insufficient protection of the SQ...

PT-2022-28085 · Xstream · Stream

Name of the Vulnerable Software and Affected Versions: StreamX versions 6.02.01 through 6.04.34 Description: The issue allows authenticated users to gain unauthorized access to files on the server's filesystem due to a path traversal vulnerability. This affects StreamX applications that use the...

PT-2022-18144 · Devolutions · Devolutions Remote Desktop Manager

Name of the Vulnerable Software and Affected Versions: Devolutions Remote Desktop Manager versions prior to 2022.1 Description: The issue allows information disclosure via a password brute-force attack due to weak password derivation for export. An error caused base64 to be decoded, potentially...

PT-2022-19879 · Open Xchange · Ox App Suite

Name of the Vulnerable Software and Affected Versions: OX App Suite versions through 8.2 Description: The issue allows for XSS because BMFreehand10 and image/x-freehand are not blocked. Recommendations: For OX App Suite versions through 8.2, consider blocking BMFreehand10 and image/x-freehand to...

PT-2022-27978

Name of the Vulnerable Software and Affected Versions TrueConf Server version 5.2.0.10225 Description A SQL injection issue in the web API allows remote unauthenticated attackers to execute arbitrary SQL commands, ultimately leading to remote code execution. Recommendations For TrueConf Server...

PT-2022-28095 · Nintendo · Nintendo Switch Sports +9

Name of the Vulnerable Software and Affected Versions: Animal Crossing: New Horizons versions prior to 2.0.6 Mario Kart 7 versions prior to 1.2 Mario Kart 8 Deluxe versions prior to 2.1.0 ARMS versions prior to 5.4.1 Splatoon 2 versions prior to 5.5.1 Splatoon 3 versions prior to late 2022 Super...

PT-2022-18890 · Eserver · Server

Name of the Vulnerable Software and Affected Versions: userver versions prior to 42059b6319661583b3080cab9b595d4f8ac48128 Description: The issue allows attackers to cause a denial of service via crafted HTTP requests, involving collisions in the hash functionality. Recommendations: For versions...

PT-2022-27933 · D Link · D-Link Dir-846

Name of the Vulnerable Software and Affected Versions: D-Link DIR-846 version A1 FW100A43 Description: A command injection issue was discovered via the auto upgrade hour parameter in the SetAutoUpgradeInfo function. This allows for potential exploitation. No information is provided about the...

PT-2022-27622 · Ip Com · Ip-Com M50

Name of the Vulnerable Software and Affected Versions: IP-COM M50 version 15.11.0.3310768 Description: A buffer overflow issue was discovered via the sPortMapIndex parameter in the formDelPortMapping function. This issue can potentially be exploited, although specific details about the number of...

PT-2022-27625 · Ip Com · Ip-Com M50

Name of the Vulnerable Software and Affected Versions: IP-COM M50 version 15.11.0.3310768 Description: A command injection issue was found via the hostname parameter in the formSetNetCheckTools function. This allows for potential command injection attacks. Recommendations: For IP-COM M50 version...

PT-2022-6230 · D Link · D-Link Dir-3040

Name of the Vulnerable Software and Affected Versions: D-Link DIR-3040 version 1.20B03 Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 routers. Authentication is not required to exploit this issue. The specific flaw...

PT-2022-27621 · Ip Com · Ip-Com M50

Name of the Vulnerable Software and Affected Versions: IP-COM M50 version 15.11.0.3310768 Description: A buffer overflow issue was discovered via the rules parameter in the formAddDnsHijack function. Recommendations: For IP-COM M50 version 15.11.0.3310768, consider restricting access to the...

PT-2022-27785 · Tauri · Tauri

Name of the Vulnerable Software and Affected Versions: Tauri versions prior to the latest release Tauri versions 1.x prior to the backported patch Description: The filesystem glob pattern wildcards , ?, and ... match file path literals and leading dots by default, which unintentionally exposes su...

Priva TopControl Suite

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Priva Equipment: TopControl Suite Vulnerability: Use of Password Hash with Insufficient Computational Effort 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to...

PT-2022-27738 · Ayacms · Ayacms

Name of the Vulnerable Software and Affected Versions: AyaCMS version 3.1.2 Description: The issue is related to a code flaw in the ust sql.inc.php file, which allows attackers to cause command execution by inserting malicious code. Recommendations: For AyaCMS version 3.1.2, consider restricting...

PT-2022-17615 · Liquidjs · Liquidjs

Name of the Vulnerable Software and Affected Versions: liquidjs versions prior to 10.0.0 Description: The issue concerns Information Exposure when the ownPropertyOnly parameter is set to False, resulting in the leaking of properties of a prototype. Recommendations: For versions 9.34.0 and higher,...

PT-2022-27800 · Unknown · Daloradius

Name of the Vulnerable Software and Affected Versions: daloradius versions prior to master Description: The issue concerns a sensitive cookie without the 'HttpOnly' flag in the GitHub repository lirantal/daloradius. This could potentially allow unauthorized access to sensitive information...

PT-2022-7108 · Systemd +9 · Systemd +9

Name of the Vulnerable Software and Affected Versions: systemd versions 247 and later, with affected builds including those with libacl support Description: A security flaw in systemd-coredump can cause a local information leak due to not respecting the fs.suid dumpable kernel setting. This issue...