PT-2022-14599 · Google · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to a possible bypass of configuration integrity due to improperly used crypto, which could lead to local escalation of privilege with no additional execution privileges needed. User interaction...

PT-2022-14511 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: In Connectivity, there is a possible bypass of the restriction of starting activity from background due to a logic error in the code. This could lead to local escalation of privilege with User executio...

PT-2022-14475 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue concerns a side channel information disclosure in PackageManager, allowing an attacker to determine whether an app is installed without requiring query permissions. This could lead to local...

PT-2022-14606 · Google · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel affected versions not specified Description: The issue concerns the Android kernel. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents whe...

Emerson ROC800, ROC800L and DL8000

1. EXECUTIVE SUMMARY CVSS v3 6.3 ATTENTION: High attack complexity Vendor: Emerson Equipment: ROC800, ROC800L and DL8000 Vulnerability: Insufficient Verification of Data Authenticity CISA is aware of a public report, known as “OT:ICEFALL” that details vulnerabilities found in multiple operational...

PT-2022-15470 · Ibm · Ibm Robotic Process Automation

Name of the Vulnerable Software and Affected Versions: IBM Robotic Process Automation versions 21.0.0 through 21.0.2 Description: The issue allows a privileged user to obtain sensitive Azure bot credential information. Recommendations: For versions 21.0.0 through 21.0.2, consider restricting acce...

PT-2022-4392 · Adobe · Framemaker

Name of the Vulnerable Software and Affected Versions: Adobe FrameMaker versions 2019 Update 8 and earlier Adobe FrameMaker versions 2020 Update 4 and earlier Description: The issue is related to an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past th...

PT-2022-4276 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to an information disclosure vulnerability in the Windows Kernel. It allows attackers to obtain sensitive information and potentially affect the system. There is no...

PT-2022-4150 · Siemens · Teamcenter

Name of the Vulnerable Software and Affected Versions: Teamcenter versions prior to V12.4.0.15 Teamcenter versions prior to V13.0.0.10 Teamcenter versions prior to V13.1.0.10 Teamcenter versions prior to V13.2.0.9 Teamcenter versions prior to V13.3.0.5 Teamcenter versions prior to V14.0.0.2...

PT-2022-4390 · Adobe · Framemaker

Name of the Vulnerable Software and Affected Versions: Adobe FrameMaker versions 2019 Update 8 and earlier Adobe FrameMaker versions 2020 Update 4 and earlier Description: The issue is related to a Use After Free vulnerability that could result in arbitrary code execution in the context of the...

PT-2022-20182 · Tibco Software · Tibco Ftl

Name of the Vulnerable Software and Affected Versions: TIBCO FTL - Community Edition versions 6.0.0 through 6.8.0 TIBCO FTL - Developer Edition versions 6.0.1 through 6.8.0 TIBCO FTL - Enterprise Edition versions 6.0.0 through 6.7.3 TIBCO FTL - Enterprise Edition version 6.8.0 TIBCO eFTL -...

PT-2022-4101 · Sap · Sap Businessobjects Business Intelligence Platform

Name of the Vulnerable Software and Affected Versions: SAP BusinessObjects Business Intelligence Platform Open Document versions 420 through 430 Description: The issue is related to information disclosure. It allows a remote attacker to gain unauthorized access to protected information. On...

Siemens Teamcenter

1. EXECUTIVE SUMMARY CVSS v3 7.6 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: Teamcenter Vulnerabilities: Command Injection, Infinite Loop 2. RISK EVALUATION Successful exploitation of these vulnerabilities could lead to command injection and denial-of-service...

Intel® Ethernet VMware Drivers Advisory

Summary: A potential security vulnerability in some Intel® Ethernet VMWare drivers may allow denial of service. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-21793 Description: Insufficient control flow management in the Intel...

Intel® NUC 9 Extreme Laptop Kit Advisory

Summary: A potential security vulnerability in some Intel® NUC 9 Extreme Laptop Kit drivers may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-21229 Description: Improper buffer restrictions for...

2022.2 IPU - Intel® Chipset Firmware Advisory

Summary: A potential security vulnerability in the Intel® Server Platform Services SPS firmware may allow denial of service. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-26074 Description: Incomplete cleanup in a firmware...

Intel® Enpirion® Digital Power Configurator GUI Advisory

This advisory contains CVEs in Altera products and has been transferred to Altera for support. The updated advisory can be found at the link below: https://www.altera.com/product-security/advisory-archive/intel-sa-00672.html...

PT-2022-17598 · Unknown · Ts-Deepmerge

Name of the Vulnerable Software and Affected Versions: ts-deepmerge versions prior to 2.0.2 Description: The issue is related to Prototype Pollution due to missing sanitization of the merge function. This allows for potential manipulation of the prototype, leading to various security issues...

PT-2022-16180 · WordPress · Wsm Downloader

Name of the Vulnerable Software and Affected Versions: WSM Downloader WordPress plugin version 1.4.0 Description: The issue arises from the lack of proper validation of the link parameter, allowing bypass of restrictions on downloading images or files from specific popular websites...

PT-2022-7642 · Mongodb +1 · Mongodb Server +2

Name of the Vulnerable Software and Affected Versions: MongoDB Server versions prior to 5.0.14 MongoDB Server versions prior to 6.0.3 Description: The issue allows an unintended actor with host-level access to cause the MongoDB Server binary to load unintended actor-controlled shared libraries wh...