PT-2022-27035 · Ibm · Ibm Navigator For I

Name of the Vulnerable Software and Affected Versions: IBM Navigator for i versions 7.3 through 7.5 Description: The issue allows an authenticated user to access the file system and download files they are authorized to, but not while using this interface. The remote authenticated user can bypass...

Huawei EulerOS: Security Advisory for linux-firmware (EulerOS-SA-2022-2826)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for linux-firmware (EulerOS-SA-2022-2851)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2022-27036 · Ibm · Ibm Navigator For I

Name of the Vulnerable Software and Affected Versions: IBM Navigator for i versions 7.3 through 7.5 Description: The issue allows an authenticated user to obtain sensitive information they are authorized to, but not while using this interface, by performing an SQL injection. This could enable an...

ROS-20221222-01

A vulnerability in the audinsendopen function of the xrdp server is related to the possibility of a stacked buffer overflow. Exploitation of the vulnerability could allow an attacker acting remotely to gain access to a remote machine Vulnerability in devredirprocclientdevlistannouncereq function ...

PT-2022-27738 · Ayacms · Ayacms

Name of the Vulnerable Software and Affected Versions: AyaCMS version 3.1.2 Description: The issue is related to a code flaw in the ust sql.inc.php file, which allows attackers to cause command execution by inserting malicious code. Recommendations: For AyaCMS version 3.1.2, consider restricting...

PT-2022-11663 · Unknown · Simplerisk

Name of the Vulnerable Software and Affected Versions: SimpleRisk versions prior to 20220306-001 Description: A vulnerability has been found in SimpleRisk, classified as problematic. It affects the function checkAndSetValidation of the file simplerisk/js/common.js. The manipulation of the argumen...

PT-2022-11637 · Leanote · Leanote

Name of the Vulnerable Software and Affected Versions: leanote version 2.6.1 Description: A problematic issue has been found in leanote, affecting the function define of the file public/js/plugins/history.js. The manipulation of the content argument leads to cross-site scripting. The attack may b...

OpenFGA Authorization Bypass

Overview During our internal security assessment, it was discovered that OpenFGA versions v0.3.0 is vulnerable to authorization bypass under certain conditions. Am I Affected? You are affected by this vulnerability if all of the following applies: 1. You are using OpenFGA v0.3.0 2. You created a...

CVE-2022-47577

An issue was discovered in the endpoint protection agent in Zoho ManageEngine Device Control Plus 10.1.2228.15. Despite configuring complete restrictions on USB pendrives, USB HDD devices, memory cards, USB connections to mobile devices, etc., it is still possible to bypass the USB restrictions b...

PT-2022-27888 · Tenda · Tenda F1203

Name of the Vulnerable Software and Affected Versions: Tenda F1203 version 2.0.1.6 Description: A buffer overflow issue was discovered via the speed dir parameter at the "/goform/SetSpeedWan" API endpoint. Recommendations: For Tenda F1203 version 2.0.1.6, as a temporary workaround, consider...

PT-2022-27894 · Tenda · Tenda F1203

Name of the Vulnerable Software and Affected Versions: Tenda F1203 version 2.0.1.6 Description: A buffer overflow issue was discovered via the entrys parameter at the "/goform/addressNat" API endpoint. Recommendations: For Tenda F1203 version 2.0.1.6, consider restricting access to the...

PT-2022-27897 · Tenda · Tenda F1203

Name of the Vulnerable Software and Affected Versions: Tenda F1203 version 2.0.1.6 Description: A buffer overflow issue was discovered via the mitInterface parameter at the "/goform/addressNat" API endpoint. Recommendations: For Tenda F1203 version 2.0.1.6, as a temporary workaround, consider...

PT-2022-7118 · Unrar +5 · Unrar +5

Name of the Vulnerable Software and Affected Versions: UnRAR versions prior to 6.2.3 Description: The issue is related to the incorrect handling of symbolic links before accessing a file, which can be exploited by a remote attacker to gain access to confidential data. This can occur via symlink...

PT-2022-27039 · Ibm · Ibm Financial Transaction Manager For Swift Services For Multiplatforms

Name of the Vulnerable Software and Affected Versions: IBM Financial Transaction Manager for SWIFT Services for Multiplatforms version 3.2.4 Description: The issue allows an authenticated user to lock additional RM authorizations, resulting in a denial of service on displaying or managing these...

PT-2022-27901 · Tenda · Tenda F1203

Name of the Vulnerable Software and Affected Versions: Tenda F1203 version 2.0.1.6 Description: A buffer overflow issue was discovered via the page parameter at the "/goform/VirtualSer" API endpoint. Recommendations: For Tenda F1203 version 2.0.1.6, as a temporary workaround, consider restricting...

PT-2022-27884 · Tenda · Tenda F1203

Name of the Vulnerable Software and Affected Versions: Tenda F1203 version 2.0.1.6 Description: A buffer overflow issue was discovered via the mac parameter at the "/goform/GetParentControlInfo" API endpoint. Recommendations: For Tenda F1203 version 2.0.1.6, avoid using the mac parameter in the...

CVE-2022-47577

CVE-2022-47577 affects Zoho ManageEngine Device Control Plus 10.1.2228.15 (endpoint protection agent). The issue allows bypassing USB restrictions by using a virtual machine (VM), enabling file exchange outside the system and exfiltration without Windows audit records. VMs can be created by any u...

PT-2022-16063 · Openfga · Openfga

Name of the Vulnerable Software and Affected Versions: OpenFGA version 0.3.0 Description: OpenFGA is an authorization/permission engine built for developers and inspired by Google Zanzibar. During an internal security assessment, it was discovered that OpenFGA is vulnerable to authorization bypas...

PT-2022-27899 · Tenda · Tenda F1203

Name of the Vulnerable Software and Affected Versions: Tenda F1203 version 2.0.1.6 Description: A buffer overflow issue was discovered via the page parameter at the "/goform/NatStaticSetting" API endpoint. Recommendations: For Tenda F1203 version 2.0.1.6, consider restricting access to the...