PT-2022-23866 · Chipolo · Chipolo One Bluetooth Tracker +1

Name of the Vulnerable Software and Affected Versions: Chipolo ONE Bluetooth tracker 2020 version 4.13.0 Chipolo iOS app version 4.13.0 Description: The issue concerns Incorrect Access Control, allowing access revocation evasion attacks. Once a malicious sharee obtains access credentials, Chipolo...

PT-2022-6398 · Aruba · Aruba Instant +1

Name of the Vulnerable Software and Affected Versions: Aruba InstantOS versions 6.4.4.8 through 6.4.4.20 and below Aruba InstantOS versions 6.5.4.23 and below Aruba InstantOS versions 8.6.0.18 and below Aruba InstantOS versions 8.7.1.9 and below Aruba InstantOS versions 8.10.0.1 and below ArubaOS...

PT-2022-37306 · Git +1 · Lcms

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of Use-of-uninitialized-value. The crash state involves FileWrite, cmsWriteUInt16Number, and Type MLU Write. No...

PT-2022-37305 · Git +1 · Mongoose

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a dynamic stack buffer overflow, which was identified through an OSS-Fuzz report. The crash state includes functions such as rx...

PT-2022-37295 · Git +1 · File

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ crash has been reported, with the crash state involving functions such as file magwarn, load 1, and apprentice load. No...

PT-2022-21162 · Unknown · Rocket.Chat

Name of the Vulnerable Software and Affected Versions: Rocket.Chat versions prior to 5 Rocket.Chat versions prior to 4.8.2 Rocket.Chat versions prior to 4.7.5 Description: The issue concerns a cleartext transmission of sensitive information in Rocket.Chat, specifically relating to OAuth tokens...

PT-2022-25463 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about a specific vulnerability. It appears to be a notification about a rejected candidate...

PT-2022-14472 · Grandstream · Grandstream Gsd3710

Name of the Vulnerable Software and Affected Versions: Grandstream GSD3710 version 1.0.11.13 Description: The issue allows an attacker with knowledge of user and password to overflow the stack, as it does not check the parameter length before using the strcopy instruction. This could lead to an...

PT-2022-25584 · Tenda · Tenda W20E

Name of the Vulnerable Software and Affected Versions: Tenda W20E router version 15.11.0.6 Description: The issue is related to a stack overflow in the formSetPortMapping function, which can be triggered by a POST request to the "goform/setPortMapping/" endpoint. This allows attackers to...

PT-2022-21797 · Apache · Apache Pulsar Java Client

Name of the Vulnerable Software and Affected Versions: Apache Pulsar Java Client versions 2.6.4 and earlier Apache Pulsar Java Client versions 2.7.0 through 2.7.4 Apache Pulsar Java Client versions 2.8.0 through 2.8.3 Apache Pulsar Java Client versions 2.9.0 through 2.9.2 Apache Pulsar Java Clien...

PT-2022-21798 · Apache · Apache Pulsar Websocket Proxy +2

Name of the Vulnerable Software and Affected Versions: Apache Pulsar Broker, Proxy, and WebSocket Proxy versions 2.6.4 and earlier Apache Pulsar Broker, Proxy, and WebSocket Proxy versions 2.7.0 through 2.7.4 Apache Pulsar Broker, Proxy, and WebSocket Proxy versions 2.8.0 through 2.8.3 Apache...

PT-2022-25492 · Hashicorp +3 · Hashicorp Consul +4

Name of the Vulnerable Software and Affected Versions: HashiCorp Consul and Consul Enterprise versions prior to 1.11.9, 1.12.5, and 1.13.2 Description: The issue concerns HashiCorp Consul and Consul Enterprise, where versions prior to 1.11.9, 1.12.5, and 1.13.2 do not check for multiple SAN URI...

PT-2022-15422 · Ibm · Ibm Common Cryptographic Architecture

Name of the Vulnerable Software and Affected Versions: IBM Common Cryptographic Architecture CCA versions 5.x through 7.x Description: The issue is related to improper input validation, which could allow a local user to cause a denial of service. Recommendations: For versions 5.x through 7.x,...

PT-2022-22510 · Otfcc +1 · Otfcc +1

Name of the Vulnerable Software and Affected Versions: OTFCC commit 617837b Description: A segmentation violation was discovered in OTFCC commit 617837b via the /release-x64/otfccdump+0x4fe954 endpoint. This issue affects the specified commit. Recommendations: For OTFCC commit 617837b, consider...

PT-2022-22500 · Otfcc +1 · Otfcc +1

Name of the Vulnerable Software and Affected Versions: OTFCC commit 617837b Description: A global buffer overflow issue was discovered in OTFCC, specifically via the /release-x64/otfccdump+0x718693 endpoint. This issue can be exploited, potentially leading to unintended consequences...

Consul Service Mesh Intention Bypass with Malicious Certificate Signing Request

Summary A vulnerability was identified in Consul and Consul Enterprise “Consul” such that a specially crafted CSR sent directly to Consul’s internal server agent RPC endpoint can include multiple SAN URI values with additional service names. This vulnerability, CVE-2022-40716, was fixed in Consul...

PT-2022-25759 · Jenkins · Jenkins View26 Test-Reporting Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins View26 Test-Reporting Plugin versions 1.0.7 and earlier Description: The issue concerns a lack of hostname validation when connecting to the configured View26 server. This could be exploited using a man-in-the-middle attack to interce...

PT-2022-25749 · Jenkins · Jenkins Rundeck Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Rundeck Plugin versions 3.6.11 and earlier Description: The issue allows attackers with Item/Read permission to obtain information about build artifacts of a given job, if the optional Run/Artifacts permission is enabled, due to a lac...

PT-2022-25751 · Jenkins · Jenkins Wildfly Deployer Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins WildFly Deployer Plugin versions 1.0.2 and earlier Description: The issue allows agent processes to read arbitrary files on the Jenkins controller file system. This is only exploitable in certain versions of Jenkins, specifically 2.31...

PT-2022-23890 · Craft Cms · Craft Cms

Name of the Vulnerable Software and Affected Versions: Craft CMS version 4.2.0.1 Description: The issue is related to Cross Site Scripting XSS in the file src/web/assets/cp/src/js/BaseElementSelectInput.js, specifically on the line label: elementInfo.label. This suggests a potential problem with...