PT-2022-25186 · Tenda · Tenda Ac21

Name of the Vulnerable Software and Affected Versions: Tenda AC21 version 16.03.08.15 Description: The issue is related to a Buffer Overflow that can occur via the /bin/httpd, specifically in the function: setSmartPowerManagement. Recommendations: For Tenda AC21 version 16.03.08.15, consider...

PT-2022-25536 · Opswat · Opswat Metadefender Icap Server

Name of the Vulnerable Software and Affected Versions: OPSWAT MetaDefender ICAP Server versions prior to 4.13.0 Description: A stored Cross-Site Scripting XSS issue allows attackers to execute arbitrary JavaScript or HTML due to the blocked page response. This enables attackers to potentially...

PT-2022-22550 · Otfcc +1 · Otfcc +1

Name of the Vulnerable Software and Affected Versions: OTFCC commit 617837b Description: A heap buffer overflow issue has been discovered in OTFCC commit 617837b via the /release-x64/otfccdump+0x6b544e endpoint. This issue can be exploited, potentially leading to security breaches. Recommendation...

PT-2022-22541 · Otfcc +1 · Otfcc +1

Name of the Vulnerable Software and Affected Versions: OTFCC commit 617837b Description: A heap buffer overflow was discovered in OTFCC commit 617837b via the /release-x64/otfccdump+0x6c0a32 endpoint. Recommendations: For OTFCC commit 617837b, as a temporary workaround, consider restricting acces...

PT-2022-22542 · Otfcc +1 · Otfcc +1

Name of the Vulnerable Software and Affected Versions: OTFCC commit 617837b Description: A heap buffer overflow issue was discovered in OTFCC via the /release-x64/otfccdump+0x6e412a endpoint. This issue can be exploited, but no details are provided about the estimated number of potentially affect...

PT-2022-25488 · Nokia · Nokia 1350 Oms

Name of the Vulnerable Software and Affected Versions: NOKIA 1350OMS version R14.2 Description: A reflected XSS issue was discovered, affecting various "/cgi-bin/R14.2" API endpoints. Recommendations: For NOKIA 1350OMS version R14.2, consider restricting access to the affected "/cgi-bin/R14.2" AP...

PT-2022-22547 · Otfcc +1 · Otfcc +1

Name of the Vulnerable Software and Affected Versions: OTFCC commit 617837b Description: A heap buffer overflow issue has been discovered in OTFCC, specifically in commit 617837b, via the /release-x64/otfccdump+0x6e41b8 endpoint. Recommendations: For OTFCC commit 617837b, consider restricting...

PT-2022-24431 · Unknown · Wedding Planner

Name of the Vulnerable Software and Affected Versions: Wedding Planner version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the booking id parameter at the "/admin/budget.php" API endpoint. Recommendations: For Wedding Planner...

PT-2022-24382 · Suprema · Suprema Biostar 2

Name of the Vulnerable Software and Affected Versions: Suprema BioStar aka Bio Star 2 version 2.8.16 Description: A vulnerability in the software allows attackers to escalate privileges to System Administrator via a crafted PUT request to the "update profile page" API endpoint. This issue enables...

PT-2022-24376 · Safe · Fme Server

Name of the Vulnerable Software and Affected Versions: Safe Software FME Server versions prior to v2022.0.1.1 Description: The issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the login page, specifically through a cross-site scripting XSS...

PT-2022-25526 · Modern Campus · Modern Campus - Omni Cms

Name of the Vulnerable Software and Affected Versions: Modern Campus Omni CMS formerly OU Campus version 10.2.4 Description: The issue allows for SQL injection via a specific substring on the login page. This can be achieved by using a substring such as ' OR 1 = 1 -- - , ?php'. Recommendations: F...

GSD-2022-1006061 netfilter: nf_tables: do not allow SET_ID to refer to another table

netfilter: nftables: do not allow SETID to refer to another table This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.211 by commit...

GSD-2022-1005911 netfilter: nf_tables: do not allow SET_ID to refer to another table

netfilter: nftables: do not allow SETID to refer to another table This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.137 by commit...

GSD-2022-1005673 netfilter: nf_tables: do not allow SET_ID to refer to another table

netfilter: nftables: do not allow SETID to refer to another table This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.61 by commit...

PT-2022-34047 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.138 Description: A buffer overflow issue exists in the sja1105 setup devlink regions function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2022-34086 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.137 Description: A refcount leak was found in the setup msi msg address function. The issue was introduced in version v2.6.23 and is fixed in Linux Kernel version v5.10.137. The actual impact and attack...

PT-2022-33788 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.63 Description: The issue is related to an error handling path in the meson mmc probe function. It was introduced in version v4.18 and fixed in Linux Kernel version v5.15.63. The actual impact and attack...

PT-2022-34267 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.211 Description: A refcount leak was discovered in the mt8173 rt5650 dev probe function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior ...

PT-2022-33757 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.63 Description: A buffer overflow issue exists in the sja1105 setup devlink regions function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2022-34288 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.211 Description: The issue concerns an uninitialized variable use in the wil write file wmi function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...