PT-2022-34281 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.211 Description: A buffer overflow issue exists in the cp2112 xfer function, which may potentially lead to security vulnerabilities. The actual impact and attack plausibility have not yet been proven...

PT-2022-34512 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.291 Description: The issue concerns an uninitialized variable use in the wil write file wmi function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2022-34413 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.256 Description: The issue is related to the use of an uninitialized variable in the wil write file wmi function. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

PT-2022-34347 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.256 Description: The issue is related to the i740 calc vclk function in the i740fb module of the Linux Kernel. The problem arises from the lack of proper validation of the argument passed to this function...

PT-2022-33935 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.62 Description: A heap-based overflow issue exists in the set ntacl dacl function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2022-33783 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.63 Description: A potential bad pointer dereference issue exists in the bpf sys bpf function. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v5.14...

Restriction Bypass

chromium:sid is vulnerable to use after free. It allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

Account Takeover (ATO)

Pageflow is vulnerable to account takeover ATO. An insecure direct object reference is possible due to improper restriction to the user membership base object. An attacker with the manager role can modify any users memberships, resulting in account takeover...

PT-2022-24603 · Unknown · Garage Management System

Name of the Vulnerable Software and Affected Versions: Garage Management System version 1.0 Description: The issue allows for arbitrary code execution. This can be achieved via the "ip/garage/php action/editProductImage.php" endpoint, specifically by manipulating the id variable. Recommendations:...

PT-2022-33444 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.18 through v5.19.1 Description: A potential memory leak was identified in the damon reclaim init function. The issue was introduced in version v5.18 and is fixed in version v5.19.2. The actual impact and attack...

PT-2022-33677 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.65 Description: A memory leak issue was discovered in the pvr probe function of the pvrusb2 media module. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kern...

PT-2022-24591 · Unknown · School Activity Updates With Sms Notification

Name of the Vulnerable Software and Affected Versions: School Activity Updates with SMS Notification version 1.0 Description: The issue is related to SQL Injection. It can be exploited via the "/activity/admin/modules/department/index.php?view=edit&id=" endpoint. The id variable is vulnerable to...

PT-2022-33492 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: A buffer overflow issue exists in the mcp smbus write function, which may potentially lead to security vulnerabilities. The actual impact and attack plausibility have not yet been proven...

PT-2022-33528 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: The issue is related to a refcount leak in the ap flash init function. It was introduced in version v4.7 and fixed in version v5.19.2. The actual impact and attack plausibility have not yet...

PT-2022-33373 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.10 through v5.19.3 Description: A buffer overflow issue exists in the sja1105 setup devlink regions function. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version...

PT-2022-33379 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.19.2 through v5.19.4 Description: The issue is related to the get phb number function, which has a locking problem. This problem was introduced in version v5.19.2 and fixed in version v5.19.4. The actual impact and...

PT-2022-24585 · Totolink · Totolink T6

Name of the Vulnerable Software and Affected Versions: TOTOLINK T6 version 4.1.5cu.709 B20210518 Description: The issue is related to a Buffer Overflow via the cstecgi.cgi endpoint. This allows for potential exploitation. No information is provided about the estimated number of potentially affect...

PT-2022-33649 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.66 Description: A memory leak issue exists in the SMB2 negotiate function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to v5.15.66,...

PT-2022-33523 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: The issue is related to a buffer overflow in the cp2112 xfer function. This is an automated ID intended to aid in discovery of potential security vulnerabilities, and the actual impact and...

PT-2022-24592 · Unknown · School Activity Updates With Sms Notification

Name of the Vulnerable Software and Affected Versions: School Activity Updates with SMS Notification version 1.0 Description: The issue is related to SQL Injection, which can be exploited via the "/activity/admin/modules/modstudent/index.php?view=view&id=" endpoint. The id variable is vulnerable ...