PT-2022-27915 · Trendnet · Trendnet Tew755Ap

Name of the Vulnerable Software and Affected Versions: TRENDnet TEW755AP version 1.13B01 Description: A stack overflow issue was discovered via the sys service parameter in the setup wizard mydlink function, specifically in the sub 4104B8 function. Recommendations: For TRENDnet TEW755AP version...

PT-2022-27919 · Trendnet · Trendnet Tew755Ap

Name of the Vulnerable Software and Affected Versions: TRENDnet TEW755AP version 1.13B01 Description: A stack overflow issue was discovered via the reject url parameter in the reject sub 41BD60 function. This issue affects the specified version of the TRENDnet TEW755AP. Recommendations: For...

The vulnerability of the FortiSandbox threat detection and mitigation system lies in its improper restriction on the path to the restricted access catalog. This allows a violator to gain unauthorized access to protected information.

The vulnerability of the FortiSandbox threat detection and mitigation system is related to an incorrect restriction on the path name to the restricted catalog. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

PT-2022-28024 · Tenda · Tenda Ac15

Name of the Vulnerable Software and Affected Versions: Tenda A15 version 15.13.07.13 Description: A stack overflow issue was discovered, which can be triggered via the wrlPwd 5g parameter at the "/goform/WifiBasicSet" API endpoint. Recommendations: For Tenda A15 version 15.13.07.13, avoid using t...

PT-2022-28019 · Tenda · Tenda Ac15

Name of the Vulnerable Software and Affected Versions: Tenda A15 version 15.13.07.13 Description: A stack overflow issue was discovered in the security parameter at the "/goform/WifiBasicSet" API endpoint. Recommendations: For Tenda A15 version 15.13.07.13, consider restricting access to the...

PT-2022-27926 · Trendnet · Tew755Ap

Name of the Vulnerable Software and Affected Versions: TRENDnet TEW755AP version 1.13B01 Description: A stack overflow issue was discovered, related to the setlogo num parameter in the icp setlogo img sub 41DBF4 function. Recommendations: For version 1.13B01, as a temporary workaround, consider...

SUSE: Security Advisory (SUSE-SU-2022:4630-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2022-28128 · Unknown · Usememos/Memos

Name of the Vulnerable Software and Affected Versions: usememos/memos versions prior to 0.9.1 Description: The issue is related to Cross-site Scripting XSS - Stored in the GitHub repository usememos/memos. This type of attack occurs when an application includes user input in its output without...

PT-2025-18797

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.0.0-rc7+ Description A NULL pointer dereference bug has been identified in the Linux kernel, specifically in the KVM Kernel-based Virtual Machine module. The issue arises when the kvm init function is called...

usememos/memos vulnerable Improper Restriction of Excessive Authentication Attempts

In usememos/memos 0.9.0 and prior, an attacker can delete other users' posts via post id, which can be done via brute force...

The vulnerability of the Huawei PCManager file transfer application lies in the incorrect limitation of the path name for the restricted access directory. This allows a perpetrator to move files along a specified path.

The vulnerability of the Huawei PCManager file transfer application lies in improper restrictions on the path to the restricted directory. Exploiting this vulnerability allows a malicious actor to transfer files through a specified path...

CVE-2022-4797

CVE-2022-4797 affects usememos/memos prior to v0.9.1. The root cause is improper restriction of excessive authentication attempts, enabling brute-force access to post deletion by guessing post IDs. Consequences include potential deletion of other users’ posts (high impact per linked advisories). ...

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Due to improper path santization, archives containing relative file paths can cause files to be written or overwritten outside of the target directory...

CVE-2022-4797 Improper Restriction of Excessive Authentication Attempts in usememos/memos

Improper Restriction of Excessive Authentication Attempts in GitHub repository usememos/memos prior to 0.9.1...

PT-2022-28096 · Unknown · Usememos/Memos

Name of the Vulnerable Software and Affected Versions: usememos/memos versions prior to 0.9.1 Description: The issue involves the incorrect use of privileged APIs, allowing a user with login permission to delete all notes of the whole application. This can be achieved via the API endpoint...

PT-2022-8065 · Unknown · Farcry Solr Pro Plugin

Name of the Vulnerable Software and Affected Versions: FarCry Solr Pro Plugin versions up to 1.5.x Description: A vulnerability was found in the FarCry Solr Pro Plugin, affecting an unknown functionality of the file packages/forms/solrProSearch.cfc of the component Search Handler. The manipulatio...

The vulnerability of Huawei FusionCube’s supervisor, related to incorrect restrictions on the path name to the restricted access catalog, allows a intruder to disclose protected information.

The vulnerability of Huawei FusionCube relates to an incorrect limitation on the path name to the restricted access catalog. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose protected information through a specially crafted HTTP request...

PT-2022-11715 · Unknown · Cocagne Pysrp

Name of the Vulnerable Software and Affected Versions: cocagne pysrp versions up to 1.0.16 Description: The issue affects the function calculate x of the file srp/ ctsrp.py, leading to information exposure through discrepancy. Recommendations: For versions up to 1.0.16, upgrade to version 1.0.17 ...

PT-2022-6097 · Dahua · Dhi-Dss4004-S2 +4

Name of the Vulnerable Software and Affected Versions: Dahua software products affected versions not specified DSS Professional affected versions not specified DSS Express affected versions not specified DHI-DSS4004-S2 affected versions not specified DHI-DSS7016D-S2 affected versions not specifie...

PT-2022-26003 · WordPress · Contest Gallery Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: Contest Gallery WordPress plugin versions prior to 19.1.5.1 Contest Gallery Pro WordPress plugin versions prior to 19.1.5.1 Description: The issue allows malicious users with at least author privilege to leak sensitive information from the...