PT-2022-8232 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The provided information does not contain details about a specific vulnerability. It appears to be a rejection notice for a candidate number from the National Vulnerability...

PT-2022-8255 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The provided information does not contain details about a specific vulnerability. It appears to be a notification about a rejected CVE candidate number, CVE-2019-20301, with ...

PT-2022-8278 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue. It appears to be a notification about a candidate number that should not be...

PT-2022-8241 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The provided information does not contain details about a specific vulnerability. It appears to be a rejection notice for a candidate number, indicating that it was not...

PT-2022-8230 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The provided information does not contain details about a specific vulnerability, but rather a notification about a rejected CVE candidate number. There is no general information about...

PT-2022-34582 · Microsoft · Exchange Server

Name of the Vulnerable Software and Affected Versions: Microsoft Exchange Server version Exchange Server 2019 and possibly earlier Description: An undisclosed vulnerability exists in an undisclosed component of Microsoft Exchange Server, allowing for remote code execution via network attack. Publ...

PT-2022-8263 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The provided information does not contain details about a specific vulnerability. It appears to be a notification about a rejected CVE candidate number, with no relevant...

PT-2022-8268 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The provided information does not describe a vulnerability but rather a rejected CVE candidate number. There is no general information about an issue, estimated number of...

PT-2022-8240 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The provided information does not contain details about a specific vulnerability. It appears to be a rejection notice for a candidate number, indicating that it was not...

PT-2022-8272 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The provided information does not contain details about a specific vulnerability. It appears to be a notification about a rejected CVE candidate number, CVE-2019-20318, with ...

PT-2022-8205 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about a specific vulnerability. It appears to be a notification about a rejected CVE candidate...

PT-2022-8274 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue. It appears to be a notification from the National Vulnerability Database, but...

PT-2022-8248 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The provided information does not describe a vulnerability but rather a rejected CVE candidate number. There is no general information about an issue, estimated number of...

PT-2022-24791 · Wolfssl +1 · Wolfssl +1

Name of the Vulnerable Software and Affected Versions: wolfSSL versions prior to 5.5.1 Description: The issue occurs when malicious clients cause a buffer overflow during a TLS 1.3 handshake, specifically when an attacker supposedly resumes a previous TLS session. This happens when a Hello Retry...

PT-2022-37425 · Unknown · Inconceivable Crate

Name of the Vulnerable Software and Affected Versions: inconceivable crate affected versions not specified Description: The issue concerns the introduction of undefined behavior into stable, safe Rust through the inconceivable! macro when the ub inconceivable feature is enabled by any reverse...

PT-2022-22161 · Os10 · Os10

Name of the Vulnerable Software and Affected Versions: Networking OS10 versions 10.5.1.x through 10.5.3.x Description: The issue allows an attacker to cause a system crash by running particular security scans. Recommendations: For versions 10.5.1.x through 10.5.3.x, consider restricting security...

PT-2022-21130 · Microsoft · Uxtheme.Dll

Name of the Vulnerable Software and Affected Versions: Notepad++ versions 8.4.1 and before Description: The issue allows an attacker to replace the vulnerable dll UxTheme.dll with their own dll, enabling them to run arbitrary code in the context of Notepad++. This is a result of DLL hijacking...

PT-2022-22684 · Ibm · Ibm Websphere Application Server

Name of the Vulnerable Software and Affected Versions: IBM WebSphere Application Server versions 7.0 through 9.0 Description: The issue allows an attacker with local network access to exploit the server-side request forgery SSRF vulnerability by sending a specially crafted request, potentially...

New Report on IoT Security

The Atlantic Council has published a report on securing the Internet of Things: "Security in the Billions: Toward a Multinational Strategy to Better Secure the IoT Ecosystem." The report examines the regulatory approaches taken by four countries--the US, the UK, Australia, and Singapore--to secur...

PT-2022-15492 · Carlo Gavazzi · Carlo Gavazzi Uwp3.0

Name of the Vulnerable Software and Affected Versions: Carlo Gavazzi UWP3.0 affected versions not specified CPY Car Park Server version 2.8.3 Description: A remote, unauthenticated attacker could use hard-coded credentials to gain full access to the device. This issue affects Carlo Gavazzi UWP3.0...