PT-2025-18618

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak issue has been identified in the Linux kernel, specifically in the blk-mq module. The leak occurs when the blk mq init allocated queue function is called, and the q-ma ops ...

Admin can set very low or very high value for setting fees & collateral factor in Market.sol resulting in value loss and/or DoS

Lines of code Vulnerability details Proof of Concept The contract’s admin has control to set values in setCollateralFactorBps, setLiquidationFactorBps, setReplenismentIncentiveBps, setLiquidationIncentiveBps, setLiquidationFeeBps. All of them have upper bounds, most of them have lower bounds, but...

PT-2022-36634 · Cacti +1 · Cacti +1

Name of the Vulnerable Software and Affected Versions: cacti versions prior to 1.2.22 cacti-spine versions prior to 1.2.22 Description: The issue is related to a cross-site injection vulnerability that can occur when creating new graphs. This vulnerability can be exploited when the boo1203952...

PT-2022-10761 · Unknown · Semcms Shop

Name of the Vulnerable Software and Affected Versions: SEMCMS SHOP version 1.1 Description: The issue is related to SQL Injection, which can be exploited via the Ant Info.php file. Recommendations: For SEMCMS SHOP version 1.1, consider restricting access to the Ant Info.php file as a temporary...

PT-2022-21750 · Unknown · Warp Ios Client

Name of the Vulnerable Software and Affected Versions: WARP iOS client affected versions not specified Description: The Lock Warp switch feature in the Zero Trust platform can be bypassed due to insufficient policy verification by the WARP iOS client. This bypass can be achieved by using the...

PT-2022-10764 · Unknown · Semcms Shop

Name of the Vulnerable Software and Affected Versions: SEMCMS SHOP version 1.1 Description: The issue is related to SQL Injection via the Ant BlogCat.php file. This allows for potential exploitation of the database. No information is provided about the estimated number of potentially affected...

PT-2025-18559

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue has been identified in the Linux kernel, specifically in the ASoC core. The issue arises when snd soc util init fails, but its return value is ignored, leading to...

Manufacturing Cybersecurity: Trends & Survey Response

Based on our survey of over 900 ICS security leaders in the United States, Germany, and Japan, we dig deeper into each industry's challenges and present Trend Micro's recommendations...

PT-2022-25154 · Unknown · Online Pet Shop We App

Name of the Vulnerable Software and Affected Versions: Online Pet Shop We App version 1.0 Description: The issue allows attackers to execute arbitrary code via a crafted PHP file uploaded through the picture upload point in the Editing function of the Product List module. This is due to an...

PT-2022-26700 · Unknown · Password Storage Application

Name of the Vulnerable Software and Affected Versions: Password Storage Application version 1.0 Description: The Password Storage Application contains a cross-site scripting XSS issue via the Setup page. This allows for potential malicious script injection and execution. Recommendations: For...

PT-2022-25600 · Tenda · Tenda Ax1803

Name of the Vulnerable Software and Affected Versions: Tenda ax1803 version 1.0.0.1 Description: The issue concerns http requests handled by the fromAdvSetMacMtuWan functions, specifically the wanSpeed, cloneType, and mac variables, which can cause a stack overflow and enable remote code executio...

PT-2022-26872 · Ip Com · Ip-Com Ew9

Name of the Vulnerable Software and Affected Versions: IP-COM EW9 version 15.11.0.149732 Description: The issue is related to an access control problem in the password reset page, allowing unauthenticated attackers to change the admin password arbitrarily. Recommendations: For IP-COM EW9 version...

CVE-2022-39330 Database resource exhaustion for logged-in users via sharee recommendations with circles

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Nextcloud Server prior to versions 23.0.10 and 24.0.6 and Nextcloud Enterprise Server prior to versions 22.2.10, 23.0.10, and 24.0.6 are vulnerable to a logged-in attacker slowing down the system by...

PT-2022-5981 · Unknown +10 · Gd Extension +10

Name of the Vulnerable Software and Affected Versions: PHP versions prior to 7.4.33, 8.0.25 and 8.1.12 Description: The issue is related to the imageloadfont function in the gd extension, which can be exploited by providing a specially crafted font file. When the loaded font is used with the...

PT-2022-24926 · Metabase · Metabase

Name of the Vulnerable Software and Affected Versions: Metabase versions prior to 0.44.5 Metabase versions prior to 1.44.5 Metabase versions prior to 0.43.7 Metabase versions prior to 1.43.7 Metabase versions prior to 0.42.6 Metabase versions prior to 1.42.6 Description: The issue allows...

PT-2022-21909 · WordPress · Wp Humans.Txt

Name of the Vulnerable Software and Affected Versions: WP Humans.txt WordPress plugin versions 1.0.0 through 1.0.6 Description: The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks. This can occur even when the unfiltered html capability is...

PT-2022-24898 · Github · Github Actions Runner

Name of the Vulnerable Software and Affected Versions: GitHub Actions Runner versions prior to 2.296.2 GitHub Actions Runner versions prior to 2.293.1 GitHub Actions Runner versions prior to 2.289.4 GitHub Actions Runner versions prior to 2.285.2 GitHub Actions Runner versions prior to 2.283.4...

PT-2022-21599 · Apple · Ipados +4

Name of the Vulnerable Software and Affected Versions: Apple iOS versions prior to 15.7.1 and prior to 16.1 Apple iPadOS versions prior to 15.7.1 and prior to 16 Apple tvOS versions prior to 16.1 Apple watchOS versions prior to 9.1 Apple macOS versions prior to 11.7.1, prior to 12.6.1, and prior ...

PT-2022-19878 · Open Xchange · Ox App Suite

Name of the Vulnerable Software and Affected Versions: OX App Suite versions through 7.10.6 Description: The issue allows OS Command Injection in a non-default configuration where ghostscript is used, because file conversion may occur for an EPS document disguised as a PDF document...

Denial of Service (DoS)

Overview Microsoft.AspNetCore.App.Runtime.win-x86 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Denial of Service DoS via excess memory allocations...