PT-2022-27826 · Proofpoint · Proofpoint Enterprise Protection

Name of the Vulnerable Software and Affected Versions: Proofpoint Enterprise Protection PPS/PoD versions 8.19.0 and earlier Description: The issue allows the pps user to escalate to root privileges due to unnecessary permissions. Recommendations: For versions 8.19.0 and earlier, update to a versi...

PT-2022-16692 · Unknown · Abacus-Ext-Cmdline

Name of the Vulnerable Software and Affected Versions: abacus-ext-cmdline versions all Description: The issue is related to Command Injection via the execute function due to improper user-input sanitization. This allows for potential command injection attacks. Recommendations: For all versions,...

PT-2022-16054

Name of the Vulnerable Software and Affected Versions jsonwebtoken versions = 8.5.1 Description A high-severity security flaw has been discovered in the jsonwebtoken library, leading to remote code execution RCE attacks. The issue arises when a malicious actor can modify the key retrieval...

PT-2022-27843 · Unknown · Collective.Contact.Widget

Name of the Vulnerable Software and Affected Versions: collective.contact.widget versions up to 1.12 Description: A problematic vulnerability was found in collective.contact.widget, affecting the title function of the file src/collective/contact/widget/widgets.py. This issue leads to cross-site...

PT-2022-27870 · Docconv · Docconv

Name of the Vulnerable Software and Affected Versions: docconv versions prior to 1.2.1 Description: A critical issue affects the function ConvertPDFImages of the file pdf ocr.go. The manipulation of the argument path leads to os command injection. The attack can be initiated remotely...

PT-2022-7109 · Microsoft · Aad Pod Identity

Name of the Vulnerable Software and Affected Versions: AAD Pod Identity versions prior to 1.8.13 Description: The issue is related to the NMI component in AAD Pod Identity, which intercepts and validates token requests based on regex. A token request made with a backslash in the request, for...

PT-2022-27696 · Baijiacms · Baijiacms

Name of the Vulnerable Software and Affected Versions: baijiacms version v4 Description: A Remote Code Execution RCE vulnerability was found in includes/baijiacms/common.inc.php. Recommendations: For baijiacms version v4, consider restricting access to the includes/baijiacms/common.inc.php file...

PT-2022-27892 · Tenda · Tenda F1203

Name of the Vulnerable Software and Affected Versions: Tenda F1203 version 2.0.1.6 Description: A command injection issue was discovered via the mac parameter at the "/goform/WriteFacMac" API endpoint. Recommendations: For Tenda F1203 version 2.0.1.6, as a temporary workaround, consider restricti...

PT-2022-24547 · Netapp · Oncommand Insight

Name of the Vulnerable Software and Affected Versions: OnCommand Insight versions 7.3.1 through 7.3.14 Description: The issue is related to an authentication bypass vulnerability in the Data Warehouse component. Recommendations: For OnCommand Insight versions 7.3.1 through 7.3.14, consider...

PT-2022-7382 · Ibm · Ibm Security Verify Governance

Name of the Vulnerable Software and Affected Versions: IBM Security Verify Governance, Identity Manager version 10.0.1 Description: The issue allows users to embed arbitrary JavaScript code in the Web UI, potentially altering the intended functionality and leading to credentials disclosure within...

PT-2022-27111 · Pdftojson · Pdftojson

Name of the Vulnerable Software and Affected Versions: pdftojson version 94204bb Description: The issue is related to a stack overflow in the Object::copyObject:Object.cc component. This occurs due to a problem in the pdftojson commit 94204bb. Recommendations: For version 94204bb, consider applyi...

PT-2022-9015 · Unknown +2 · Multimon-Ng +2

Name of the Vulnerable Software and Affected Versions: multimon-ng versions prior to 1.2.0 Description: A critical issue affects the function add ch of the file demod flex.c. The manipulation of the argument ch leads to a format string issue. Recommendations: For versions prior to 1.2.0, upgrade ...

PT-2022-28066 · Solarwinds · Hybrid Cloud Observability +1

Name of the Vulnerable Software and Affected Versions: Hybrid Cloud Observability HCO/ SolarWinds Platform version 2022.4 Description: Sensitive information was stored in plain text in a file that is accessible by a user with a local account. Recommendations: For Hybrid Cloud Observability HCO/...

PT-2022-11622 · Unknown · Ctrlo Lenio

Name of the Vulnerable Software and Affected Versions: ctrlo lenio affected versions not specified Description: A vulnerability was found in the Task Handler component, affecting the file views/task.tt. The manipulation of the argument site.org.name/check.name/task.tasktype.name/task.name leads t...

PT-2022-27658 · Opencaching Deutschland · Oc-Server3

Name of the Vulnerable Software and Affected Versions: Opencaching Deutschland oc-server3 affected versions not specified Description: A problematic vulnerability was found in the Cachelist Handler component, specifically in the file htdocs/templates2/ocstyle/cachelists.tpl. The manipulation of t...

PT-2022-27633 · Unknown · Ubi Reader

Name of the Vulnerable Software and Affected Versions: UBI Reader versions up to 0.8.0 Description: A vulnerability has been found in the UBIFS File Handler component, specifically affecting the ubireader extract files function of the file ubireader/ubifs/output.py. This issue leads to path...

PT-2022-27931 · Totolink · Totolink A7100Ru

Name of the Vulnerable Software and Affected Versions: TOTOlink A7100RU version 7.4cu.2313 B20191024 Description: A command injection issue was discovered via the wscDisabled parameter in the setting/setWiFiWpsCfg function. This allows for potential exploitation. Recommendations: For TOTOlink...

PT-2022-27340 · Unknown · Bspkrs Mcpmappingviewer

Name of the Vulnerable Software and Affected Versions: bspkrs MCPMappingViewer affected versions not specified Description: A critical issue has been found in the extractZip function of the RemoteZipHandler.java file, part of the ZIP File Handler component. This issue leads to path traversal and...

PT-2022-27219 · Unknown · Ipti Br.Tag

Name of the Vulnerable Software and Affected Versions: ipti br.tag versions prior to 2.13.0 Description: A vulnerability was found in ipti br.tag, which has been declared as problematic. The manipulation of an unknown functionality leads to cross-site scripting. The attack can be launched remotel...

PT-2022-27840

Name of the Vulnerable Software and Affected Versions Apache CXF versions prior to 3.5.5 Apache CXF versions prior to 3.4.10 Description A Server-Side Request Forgery SSRF issue exists in the parsing of the href attribute of XOP:Include in MTOM requests. This allows an attacker to perform SSRF...