PT-2022-6734 · Ruby +10 · Cgi +10

Name of the Vulnerable Software and Affected Versions: cgi gem versions 0.1.0.0 through 0.1.0.1 cgi gem versions 0.2.0 through 0.2.1 cgi gem versions 0.3.0 through 0.3.4 Description: The issue is related to HTTP response splitting, which occurs when untrusted user input is inserted into an HTTP...

Cradlepoint IBR600

1. EXECUTIVE SUMMARY CVSS v3 7.1 ATTENTION: Low attack complexity Vendor: Cradlepoint Equipment: IBR600 Vulnerabilities: Command Injection 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to execute code and native system commands. 3. TECHNICAL DETAILS 3.1...

Electricity/Energy Cybersecurity: Trends & Survey Response

Based on our survey of over 900 ICS security leaders in the United States, Germany, and Japan, we dig deeper into each industry's challenges and present Trend Micro's recommendations...

Akamai’s Perspective on November’s Patch Tuesday

Every Patch Tuesday stirs up the community. See Akamai's November insights and recommendations on what to focus on, and patch, patch, patch!...

PT-2022-26266 · Liferay · Liferay Dxp +1

Name of the Vulnerable Software and Affected Versions: Liferay Portal versions 7.3.3 through 7.4.3.16 Liferay DXP versions 7.3 before update 4 Liferay DXP versions 7.4 before update 17 Description: A SQL injection issue in the Fragment module allows attackers to execute arbitrary SQL commands via...

PT-2025-26105 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A use-after-free issue was identified in the Linux kernel, specifically in the ath9k hif usb rx cb function. This issue was reported by Syzbot and is related to incorrect initializatio...

PT-2022-25576 · Tenda · Tenda Ac1200 Router

Name of the Vulnerable Software and Affected Versions: Tenda AC1200 Router model W15Ev2 version V15.11.0.101576 Description: The issue allows an attacker with access to the router to expose sensitive information they are not explicitly authorized to have, by combining a password exposure...

PT-2022-5490

Name of the Vulnerable Software and Affected Versions GRUB2 affected versions not specified Description A buffer overflow was found in the grub font construct glyph function. A maliciously crafted pf2 font can lead to an overflow when calculating the max glyph size value, allocating a smaller tha...

PT-2022-26263 · Liferay · Liferay Dxp +1

Name of the Vulnerable Software and Affected Versions: Liferay Portal versions 7.1.0 through 7.4.2 Liferay DXP versions 7.1 before fix pack 27 Liferay DXP versions 7.2 before fix pack 15 Liferay DXP versions 7.3 before service pack 3 Description: A Cross-site scripting XSS vulnerability in the...

PT-2022-10216 · Intel · Intel Amt

Name of the Vulnerable Software and Affected Versions: IntelR AMT versions prior to 11.8.93 IntelR AMT versions prior to 11.12.93 IntelR AMT versions prior to 11.22.93 IntelR AMT versions prior to 12.0.92 IntelR AMT versions prior to 14.1.67 IntelR AMT versions prior to 15.0.42 IntelR AMT version...

PT-2022-18096 · Intel · Intel Amt

Name of the Vulnerable Software and Affected Versions: IntelR AMT versions prior to 11.8.93 IntelR AMT versions prior to 11.12.93 IntelR AMT versions prior to 11.22.93 IntelR AMT versions prior to 12.0.92 IntelR AMT versions prior to 14.1.67 IntelR AMT versions prior to 15.0.42 IntelR AMT version...

PT-2022-27409 · Payara · Payara Platform Community +1

Name of the Vulnerable Software and Affected Versions: Payara Platform Community versions prior to 4.1.2.191.38 Payara Platform Community versions 5.x prior to 5.2022.4 Payara Platform Community versions 6.x prior to 6.2022.1 Payara Platform Enterprise versions prior to 5.45.0 Description: The...

PT-2022-18564 · Amd · Amd Link Android App

Name of the Vulnerable Software and Affected Versions: AMD Link Android app affected versions not specified Description: The issue is related to insufficient access controls, which may potentially result in information disclosure. Recommendations: At the moment, there is no information about a...

PT-2022-26847 · Shopwind · Shopwind

Name of the Vulnerable Software and Affected Versions: Shopwind version 3.4.3 Description: The issue is related to a reflected cross-site scripting XSS vulnerability. This vulnerability was found in the /common/library/Page.php component. Recommendations: For Shopwind version 3.4.3, consider...

PT-2022-25541 · Unknown · Roxy Fileman

Name of the Vulnerable Software and Affected Versions: Roxy Fileman version 1.4.6 Description: The issue allows Remote Code Execution via a .phar upload. This is because the default FORBIDDEN UPLOADS value in conf.json only blocks .php, .php4, and .php5 files. In some web-server configurations,...

PT-2022-17856 · Unknown · Modem 4G Rrc

Name of the Vulnerable Software and Affected Versions: Modem 4G RRC affected versions not specified Description: The issue is related to improper input validation in the Modem 4G RRC, which can cause a system crash. This can lead to a remote denial of service when a specially crafted SIB12 CMAS...

PT-2025-26018 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.19.0-rc6 Description: A use-after-free issue has been identified in the Linux kernel, specifically in the dm sm register threshold callback function. This issue can be triggered when a metadata commit fails,...

 Intel® Distribution of OpenVINO™ Toolkit Advisory

Summary: A potential security vulnerability in the Intel® Distribution of OpenVINO™ Toolkit software may allow denial of service. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2021-26251 Description: Improper input validation in th...

PT-2022-5429

Name of the Vulnerable Software and Affected Versions Citrix Gateway affected versions not specified Citrix NetScaler Application Delivery Controller affected versions not specified Description The issue is related to unauthorized access to Gateway user capabilities. It involves a bypass of the...

PT-2022-27175 · Unknown · Html2Xhtml

Name of the Vulnerable Software and Affected Versions: html2xhtml version 1.3 Description: The issue is related to an Out-Of-Bounds read in the elm close function at procesador.c. This allows attackers to access sensitive files or cause a Denial of Service DoS via a crafted html file...