PT-2025-25869

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.19.0-rc7+ Description A lockdep violation has been resolved in the Linux kernel. The issue was caused by the scope of udc mutex being too large, which led to a possible circular locking dependency. The problem...

PT-2022-22492 · Unknown +4 · Advancecomp +4

Name of the Vulnerable Software and Affected Versions: Advancecomp version 2.3 Description: The issue is related to a segmentation fault in Advancecomp. There are also mentions of other bugs and security issues that have been fixed in an update. Recommendations: For Advancecomp version 2.3, updat...

Security update for opera (important)

openSUSE Security Update: Security update for opera Announcement ID: openSUSE-SU-2022:10109-1 Rating: important References: Cross-References: CVE-2022-2852 CVE-2022-2853 CVE-2022-2854 CVE-2022-2855 CVE-2022-2856 CVE-2022-2857 CVE-2022-2858 CVE-2022-2859 CVE-2022-2860 CVE-2022-2861 Affected...

PT-2022-7699

Name of the Vulnerable Software and Affected Versions D-Link GO-RT-AC750 versions GORTAC750 revA v101b03 through GO-RT-AC750 revB FWv200b02 Description The issue is related to the hnap main function of the D-Link GO-RT-AC750 router's firmware, which fails to neutralize special elements used in an...

Vulnerability fixed in Cisco ACI Multi-Site Orchestrator

Cisco has fixed a vulnerability in ACI Multi-Site Orchestrator. An authenticated malicious party can exploit the exploit the vulnerability to grant itself elevated privileges and execute commands under Administrator privileges. Cisco has released updates to fix the vulnerability in ACI Multi-Site...

PT-2022-23565 · Unknown · Ingredients Stock Management System

Name of the Vulnerable Software and Affected Versions: Ingredients Stock Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/categories/manage category.php" API endpoint. Recommendation...

PT-2022-15648 · Apache · Apache Libapreq2

Name of the Vulnerable Software and Affected Versions: Apache libapreq2 versions 2.16 and earlier Description: A flaw in Apache libapreq2 could cause a buffer overflow while processing multipart form uploads. A remote attacker could send a request causing a process crash, which could lead to a...

PT-2022-9135 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to the fixed version Description: The issue arises from the method PVRSRVBridgeTLDiscoverStreams, which allocates a buffer on the heap and fills it via TLServerDiscoverStreamsKM. If TLServerDiscoverStreamsKM fails due t...

PT-2022-21204 · Wwbn · Avideo

Name of the Vulnerable Software and Affected Versions: WWBN AVideo versions 11.6 WWBN AVideo dev master commit 3f7c0364 Description: An issue exists in the login functionality due to an improper password check. This allows an attacker with a user's password hash to directly log into the account,...

Malicious code in gulpinstazall (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e27587d7e12187dc2fd956230d7724dbe231ba56539d1bdeec7a7153ed3448e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in invariqaot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4dd04b15d91a21796793549f0f1d1820b837deb84cf3723c8191107e6d6c198c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2022-19897 · Cybozu · Cybozu Office

Name of the Vulnerable Software and Affected Versions: Cybozu Office versions 10.0.0 through 10.8.5 Description: A browse restriction bypass issue in the Custom App of Cybozu Office allows a remote authenticated attacker to obtain Custom App data via unspecified vectors. Recommendations: For Cybo...

PT-2022-23776 · Flir · Flir Ax8

Name of the Vulnerable Software and Affected Versions: FLIR AX8 thermal sensor cameras version up to and including 1.46.16 Description: The issue is related to Directory Traversal due to improper access restriction. An unauthenticated, remote attacker can exploit this by sending a URI that contai...

PT-2022-23074 · Unknown · Gitops Tools Extension For Vscode

Name of the Vulnerable Software and Affected Versions: GitOps Tools Extension for VSCode affected versions not specified Description: A specially crafted Flux object may allow for remote code execution in the machine running the extension, in the context of the user that is running VSCode. Users...

PT-2022-22583 · Unknown · Clinic'S Patient Management System

Name of the Vulnerable Software and Affected Versions: Clinic's Patient Management System version 1.0 Description: The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the...

Delta Industrial Automation DRAS

1. EXECUTIVE SUMMARY CVSS v3 5.5 ATTENTION: Low attack complexity Vendor: Delta Electronics Equipment: Delta Robot Automation Studio DRAS Vulnerability: Improper Restriction of XML External Entity Reference. 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker...

Creator can be incorrectly paid because of array truncate when distributing mint fee.

Lines of code Vulnerability details Impact Detailed description of the impact of this finding. The creatorRecipient and creatorShares can be forcefully trancated to a fixed length. And the truncated creator is not paid. Proof of Concept Provide direct links to all referenced code in GitHub. Add...

CVE-2022-35954 Delimiter injection vulnerability in @actions/core exportVariable

The GitHub Actions ToolKit provides a set of packages to make creating actions easier. The core.exportVariable function uses a well known delimiter that attackers can use to break out of that specific variable and assign values to other arbitrary variables. Workflows that write untrusted values t...

PT-2022-14471 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to the fixed version Description: The issue concerns a side channel information disclosure in LocaleManager, allowing an attacker to determine if an app is installed without query permissions. This could lead to local...

Moderate: Red Hat Bug Fix Advisory: OpenShift Container Platform 4.11 low-latency extras update

Red Hat OpenShift Container Platform low-latency extras release 4.11, which provides an update for cnf-tests-container, dpdk-base-container and performance-addon-operator-must-gather-rhel8-container is now available. Secondary scheduler builds and numaresources-operator are also available for...