PT-2022-21757 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 12.8 through 15.2.5 GitLab CE/EE versions 15.3 through 15.3.4 GitLab CE/EE versions 15.4 through 15.4.1 Description: The issue is related to improper access control in the GitLab CE/EE API. This allows an unauthorized us...

PT-2022-18936 · Tenable · Nessus Essentials +2

Name of the Vulnerable Software and Affected Versions: Nessus Essentials and Professional affected versions not specified Description: The issue allows an authenticated user with debug privileges to retrieve stored Nessus policy credentials from the "nessusd" process in cleartext via process...

PT-2022-21785 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab EE versions 13.7 through 15.2.4 GitLab EE versions 15.3 through 15.3.3 GitLab EE versions 15.4 through 15.4.0 Description: An issue has been discovered in GitLab EE where a user's primary email may be disclosed to an attacker through...

PT-2022-22804 · Hunter2 · Hunter2

Name of the Vulnerable Software and Affected Versions: hunter2 versions prior to 2.1.0 Description: An issue has been discovered in the improper handling of auto-completion input, allowing an authenticated attacker to extract other users' email addresses. Recommendations: For versions prior to...

PT-2022-20056 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions prior to 15.1.6 GitLab CE/EE versions 15.2 prior to 15.2.4 GitLab CE/EE versions 15.3 prior to 15.3.2 Description: The issue is related to improper access control, which allows the disclosure of pipeline status to...

Akamai’s Perspective on October’s Patch Tuesday 2022

Every Patch Tuesday stirs up the community. See Akamai's October insights and recommendations on what to focus on, and patch, patch, patch!...

PT-2022-22448 · Sourcecodester · Sourcecodester Simple Online Public Access Catalog

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Online Public Access Catalog version 1.0 Description: A critical issue has been discovered, affecting the Admin Login component, specifically the /opac/Actions.php?a=login endpoint. The manipulation of the username and...

PT-2022-25979 · Unknown · Fingerprint Trusted Application

Name of the Vulnerable Software and Affected Versions: Fingerprint trusted application TA affected versions not specified Description: The issue concerns heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application. Successful exploitation may affect...

PT-2022-24640 · Unknown · Hipp Module

Name of the Vulnerable Software and Affected Versions: HIPP module affected versions not specified Description: The issue is related to the HIPP module not verifying data transferred in the kernel space. This can lead to an out-of-bounds read when successfully exploited, affecting data...

PT-2022-22536 · Otfcc +1 · Otfcc +1

Name of the Vulnerable Software and Affected Versions: OTFCC commit 617837b Description: A heap buffer overflow issue was discovered in OTFCC, which can be exploited via the /release-x64/otfccdump+0x6c0473 endpoint. Recommendations: For OTFCC commit 617837b, consider restricting access to the...

PT-2022-24641 · Unknown · Facial Recognition Module

Name of the Vulnerable Software and Affected Versions: Facial Recognition Module affected versions not specified Description: The issue is related to a vulnerability in input validation within the facial recognition module. This could potentially impact data confidentiality if successfully...

PT-2022-5277 · D Link · D-Link Covr

Name of the Vulnerable Software and Affected Versions: D-Link COVR versions 1200, 1202, 1203 v1.08 Description: A command injection issue was found via the /SetTriggerWPS/PIN parameter at the SetTriggerWPS function. This issue is related to inadequate data cleaning at the management level, allowi...

PT-2022-5276 · D Link · D-Link Covr

Name of the Vulnerable Software and Affected Versions: D-Link COVR versions 1.08 Description: The issue is related to errors in the code of the pseudo-random number generator, which may allow a remote attacker to compromise the integrity of protected information. The pseudo-random number generato...

PT-2022-8846 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about a specific vulnerability. It appears to be a notification about a rejected candidate...

PT-2022-25889 · Tenda · Tenda Ac1900 +1

Name of the Vulnerable Software and Affected Versions: Tenda AC1900 version 1.180320Beta Tenda AC1200 version 15.03.06.51 Description: A buffer overflow was discovered in the 0x32384 function, allowing attackers to cause a Denial of Service DoS via a crafted request. Recommendations: For Tenda...

Oil and Gas Cybersecurity: Trends & Response to Survey

Based on our survey of over 900 ICS security leaders in the United States, Germany, and Japan, we dig deeper into each industry's challenges and present Trend Micro's recommendations...

PT-2022-25894 · Unknown · Clippercms

Name of the Vulnerable Software and Affected Versions: ClipperCMS version 1.3.3 Description: A Server-Side Request Forgery SSRF issue was discovered, which can be exploited via the pkg url parameter at the "/manager/index.php" API endpoint. Recommendations: For ClipperCMS version 1.3.3, avoid usi...

PT-2022-6647 · Juniper Networks · Junos Evolved +1

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 19.2R3-S6 Juniper Networks Junos OS versions 19.3 prior to 19.3R3-S6 Juniper Networks Junos OS versions 19.4 prior to 19.4R3-S8 Juniper Networks Junos OS versions 20.1 prior to 20.1R3-S2 Juniper...

PT-2022-6707 · Juniper Networks · Junos Evolved

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS Evolved versions prior to 20.4R3-S1-EVO Juniper Networks Junos OS Evolved version 21.1-EVO Juniper Networks Junos OS Evolved versions prior to 21.2R3-EVO Juniper Networks Junos OS Evolved versions prior to 21.3R2-EVO...

PT-2022-16810 · Kylin · Kylin

Name of the Vulnerable Software and Affected Versions: Kylin versions 2.6.5 and earlier Kylin versions 3.1.2 and earlier Kylin versions 4.0.1 and earlier Description: The issue is related to a command injection vulnerability in Kylin's cube designer function. This occurs when overwriting system...