PT-2022-10328 · NetGear · Netgear R8000 Router

Name of the Vulnerable Software and Affected Versions: Netgear R8000 Router version 1.0.4.56 Description: A buffer overflow issue allows remote attackers to execute arbitrary code or cause a denial-of-service. This is achieved by sending a crafted POST to "/bd genie create account.cgi" with a...

PT-2022-14128 · Sophos · Sophos Firewall

Name of the Vulnerable Software and Affected Versions: Sophos Firewall versions prior to 18.5 MR4 Sophos Firewall versions prior to 19.0 MR1 Description: The issue concerns multiple SQL injection vulnerabilities in the Webadmin component of Sophos Firewall. These vulnerabilities can be exploited ...

PT-2022-24311 · Mtr +1 · Mtr +1

Name of the Vulnerable Software and Affected Versions: Nagios XI version 5.8.6 MTR component version 1.0.4 Description: A cross-site scripting XSS issue was found in Nagios XI via the MTR component. This allows for potential malicious script execution. Recommendations: For Nagios XI version 5.8.6...

PT-2022-24066 · Phicomm · Phicomm Fir303B A2 +3

Name of the Vulnerable Software and Affected Versions: Phicomm FIR151B A2, FIR302E A2, FIR300B A2, FIR303B A2 routers versions 3.0.1.17 and earlier Description: A remote command execution issue was found, which can be exploited via the trHops parameter of the tracert function. Recommendations: Fo...

PT-2022-20581 · Xwiki · Xwiki Platform Security Parent Pom

Name of the Vulnerable Software and Affected Versions: XWiki Platform Security Parent POM versions 5.0 through 12.10.10 XWiki Platform Security Parent POM versions 13.0.0 through 13.4.5 XWiki Platform Security Parent POM versions 13.5.0 through 13.10.0 Description: A bug in the security cache...

PT-2022-24314 · Nagios Xi · Nagios Xi

Name of the Vulnerable Software and Affected Versions: Nagios XI version 5.8.6 Description: A cross-site scripting XSS issue was found in Nagios XI via the System Performance Settings page under the Admin panel. This allows for potential malicious script execution. Recommendations: For Nagios XI...

PT-2022-13467 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The issue was investigated and found not to be a security issue. It was withdrawn by its CNA. Recommendations: At the moment, there is no information about a newer version th...

PT-2022-6606 · D Link · D-Link Dap-2020 +1

Name of the Vulnerable Software and Affected Versions: D-Link DAP-1360 affected versions not specified D-Link DAP-2020 affected versions not specified Description: This issue allows network-adjacent attackers to disclose sensitive information on affected installations of D-Link routers...

PT-2022-16599 · WordPress · Download Manager

Name of the Vulnerable Software and Affected Versions: Download Manager plugin for WordPress versions up to, and including 3.2.50 Description: The issue arises from insufficient file type and path validation on the deleteFiles function found in the /Admin/Menu/Packages.php file. This function is...

PT-2022-25815 · Kitty +4 · Kitty +4

Name of the Vulnerable Software and Affected Versions: Kitty versions prior to 0.26.2 Description: The issue is related to insufficient validation in the desktop notification escape sequence, which can lead to arbitrary code execution. This occurs when a user displays attacker-controlled content ...

PT-2022-16193 · Aruba · Arubaos-Cx Switches

Name of the Vulnerable Software and Affected Versions: ArubaOS-CX Switches versions 10.06.0210 and below ArubaOS-CX Switches versions 10.08.1070 and below ArubaOS-CX Switches versions 10.09.1030 and below ArubaOS-CX Switches versions 10.10.0002 and below Description: Authenticated command injecti...

PT-2022-9890 · Unknown · Geonetwork

Name of the Vulnerable Software and Affected Versions: GeoNetwork versions 3.4.0 through 3.12.0 GeoNetwork versions 4.0.0 through 4.0.3 Description: A privileged attacker can use the directory harvester before-script to execute arbitrary OS commands remotely on the hosting infrastructure. This...

PT-2022-25032 · Ibm · Lotus 1-2-3 R3 For Unix

Name of the Vulnerable Software and Affected Versions: 123elf Lotus 1-2-3 versions prior to 1.0.0rc3 Lotus 1-2-3 R3 for UNIX and other platforms versions prior to 9.8.2 Description: The issue allows attackers to execute arbitrary code via a crafted worksheet. This occurs because of a stack-based...

PT-2022-4657 · Qnap · Qnap Nas +1

Name of the Vulnerable Software and Affected Versions: QNAP NAS running Photo Station versions prior to 5.2.14 QNAP NAS running Photo Station versions prior to 5.4.15 QNAP NAS running Photo Station versions prior to 5.7.18 QNAP NAS running Photo Station versions prior to 6.0.22 QNAP NAS running...

PT-2022-23494 · Mapper · Mapper

Name of the Vulnerable Software and Affected Versions: Mapper versions 4.0.0 through 4.2.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the ids parameter at the selectByIds function. Recommendations: For Mapper versions 4.0.0 through...

PT-2022-9680 · Avaya · Avaya Ip Office Usb Creator +1

Name of the Vulnerable Software and Affected Versions: Avaya IP Office Admin Lite and USB Creator versions 11.1 Feature Pack 2 Service Pack 1 and earlier Description: A privilege escalation issue was discovered that may allow a local user to escalate privileges. Recommendations: For Avaya IP Offi...

PT-2022-23166 · Unknown · Github.Com/Gagliardetto/Binary

Name of the Vulnerable Software and Affected Versions: github.com/gagliardetto/binary versions prior to v0.7.1 Description: The issue is a memory allocation vulnerability that can be exploited to allocate slices in memory with excessive size values, potentially exhausting available memory or...

PT-2022-24812 · Nextcloud +1 · Nextcloud Server +2

Name of the Vulnerable Software and Affected Versions: Nextcloud Server versions prior to 23.0.8 Nextcloud Server versions prior to 24.0.4 Nextcloud Enterprise Server versions prior to 22.2.10.4 Nextcloud Enterprise Server versions prior to 23.0.8 Nextcloud Enterprise Server versions prior to...

PT-2022-23487 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7.97 Description: The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities are located at the /dede/co do.php endpoint via the dopost, rpok, and aid parameters. Recommendations: For DedeCMS...

PT-2022-23499 · Innosilicon · Innosilicon T3T+

Name of the Vulnerable Software and Affected Versions: InnoSilicon T3T+ version t2t+ soc 20190911 151433.swu Description: A remote code execution issue was found in the checkUrl function, allowing for potential exploitation. Recommendations: For version t2t+ soc 20190911 151433.swu, as a temporar...