PT-2022-5989 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.14 and earlier Description: The issue exists due to inadequate protection of the web page structure in Adobe Experience Manager, allowing a remote attacker to perform cross-site scripting attacks using a...

PT-2022-5995 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.14 and earlier Description: The issue is a reflected Cross-Site Scripting XSS vulnerability. It can be exploited if an attacker convinces a victim to visit a URL referencing a vulnerable page, allowing...

PT-2022-5962 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.14 and earlier Description: The issue is related to a reflected Cross-Site Scripting XSS vulnerability. It can be exploited if an attacker convinces a victim to visit a URL referencing a vulnerable page,...

PT-2022-11596 · WordPress · Yikes-Inc-Easy-Mailchimp-Extender

Name of the Vulnerable Software and Affected Versions: yikes-inc-easy-mailchimp-extender Plugin versions up to 6.8.5 Description: A vulnerability has been found in the yikes-inc-easy-mailchimp-extender Plugin, affecting an unknown part of the file admin/partials/ajax/add field to form.php. The...

PT-2022-6133 · Sap · Sap Disclosure Management

Name of the Vulnerable Software and Affected Versions: SAP Disclosure Management version 10.1 Description: The issue allows an authenticated attacker to exploit certain misconfigured application endpoints to read sensitive data, such as financial reports. These endpoints are normally exposed over...

PT-2022-24573 · WordPress · Disable Json Api

Name of the Vulnerable Software and Affected Versions: Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan WordPress plugin versions prior to 4.20 Description: The issue concerns a lack of proper authorization and CSRF protection in an AJAX action within the...

PT-2022-26949 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about a specific issue, as it mentions that the referenced CVE is not valid. There is no...

PT-2022-21789 · WordPress · Phlox

Name of the Vulnerable Software and Affected Versions: Shortcodes and extra features for Phlox theme WordPress plugin versions prior to 2.10.7 Description: The issue arises from the unserialize of the content of an imported file, which could lead to PHP object injection when a user imports a...

PT-2022-6939

Name of the Vulnerable Software and Affected Versions SQLite versions prior to 3.40.0 Description The issue is related to errors in the implementation of the azAllowedFunctions protection mechanism in the SQLite database management system's command-line interface. This could allow an attacker to...

PT-2022-27781 · Unknown · Spring-Boot-Admin

Name of the Vulnerable Software and Affected Versions: Spring Boot Admin versions prior to 2.6.10 Spring Boot Admin versions prior to 2.7.8 Description: The issue affects users who run Spring Boot Admin Server with enabled Notifiers and write access to environment variables via UI. This allows fo...

PT-2022-36142 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.80 Description: The issue is related to a possible memory leak caused by a missing pci dev put call. This problem was introduced in version v4.4 and is fixed in Linux Kernel version v5.15.80. The actual...

PT-2022-27547 · Tenda · Tenda W30E

Name of the Vulnerable Software and Affected Versions: Tenda W30E version 1.0.1.25633 Description: A stack overflow issue was discovered via the cmdinput parameter at the "/goform/exeCommand" API endpoint. Recommendations: For Tenda W30E version 1.0.1.25633, consider restricting access to the...

PT-2022-36307 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.155 Description: A use-after-free bug was discovered in the nilfs2 component of the Linux Kernel. The issue is related to the ns writer on remount. The actual impact and attack plausibility have not yet be...

PT-2022-27554 · Tenda · Tenda W30E

Name of the Vulnerable Software and Affected Versions: Tenda W30E version 1.0.1.25633 Description: A stack overflow issue was discovered via the page parameter at the "/goform/SafeEmailFilter" API endpoint. This issue affects the Tenda W30E router. Recommendations: For Tenda W30E version...

PT-2022-21400 · Red Hat · Openshift

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue is related to the absence of the X-FRAME-OPTIONS header in response headers, which helps prevent Clickjacking attacks. Without this header, some browsers may interpret the...

PT-2022-24148 · Aruba · Aruba Airwave Management Platform

Name of the Vulnerable Software and Affected Versions: Aruba AirWave Management Platform versions 8.2.15.0 and below Description: Vulnerabilities in the AirWave Management Platform web-based management interface exist, which expose some URLs to a lack of proper access controls. These...

PT-2022-26176 · Dhis2 · Dhis2

Name of the Vulnerable Software and Affected Versions: DHIS 2 versions prior to 2.36.12.1 DHIS 2 versions prior to 2.37.8.1 DHIS 2 versions prior to 2.38.2.1 DHIS 2 versions prior to 2.39.0.1 Description: DHIS 2 is an open source information system for data capture, management, validation,...

PT-2022-36538 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.300 Description: The issue is related to a possible memory leak caused by a missing pci dev put call. This problem was introduced in version v4.4 and is fixed in version v4.14.300. The actual impact and...

PT-2022-36392 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 3.9 through 5.4.224 Description: The issue is related to an infoleak in the vmci host do receive datagram function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2022-36440 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.224 Description: The issue concerns undefined behavior in bit shift for mdiobus register in the Linux Kernel's MDIO module. The actual impact and attack plausibility have not yet been proven. Recommendation...