PT-2022-33536 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: The issue is related to the use of an uninitialized variable in the wil write file wmi function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linu...

PT-2022-33321 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.4 Description: A null pointer dereference issue was discovered in the f2fs get dnode of data function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2022-33385 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.4 Description: The issue is related to a potential buffer overflow caused by the snprintf function in the ASoC: SOF: Intel: hda driver. The actual impact and attack plausibility have not yet been proven...

PT-2022-33579 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: The issue concerns a refcount leak in the omapdss init of function. It was introduced in version v4.20 and fixed in Linux Kernel version v5.19.2. The actual impact and attack plausibility ha...

PT-2022-33555 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: The issue is related to a potential off-by-one overflow in the il4965 rs fill link cmd function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linu...

PT-2022-33467 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: A refcount leak was discovered in the max77620 initialise fps function. The issue was introduced in version v4.7 and is fixed in Linux Kernel version v5.19.2. The actual impact and attack...

PT-2022-23894 · Craft Cms · Craft Cms

Name of the Vulnerable Software and Affected Versions: Craft CMS version 4.2.0.1 Description: The issue is related to Stored Cross Site Scripting XSS in the "/admin/myaccount" API endpoint. This allows for malicious scripts to be stored and executed on the platform. Recommendations: For Craft CMS...

PT-2022-33550 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.3 through v5.19.1 Description: A refcount leak was discovered in the mcde dsi bind function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions v5.3 through...

PT-2022-24367 · Unknown · Event Management System

Name of the Vulnerable Software and Affected Versions: Event Management System version 1.0 Description: The issue allows attackers to execute arbitrary code via a crafted PHP file, exploiting an arbitrary file upload vulnerability in the /Royal Event/update image.php component. Recommendations: F...

PT-2022-23898 · Stealjs · Stealjs

Name of the Vulnerable Software and Affected Versions: stealjs steal version 2.2.4 Description: The issue is related to a prototype pollution vulnerability in the convertLater function in npm-convert.js. This vulnerability is exploited via the requestedVersion variable in npm-convert.js...

PT-2022-19966 · Milesight · Milesight Video Management Systems

Name of the Vulnerable Software and Affected Versions: Milesight Video Management Systems VMS versions prior to 40.7.0.79-r1 Description: The issue is caused by improper input handling at the camera's web-based management interface. A remote attacker could exploit this by sending a specially...

PT-2022-16828 · Ezviz · Ezviz Cs-C6N-A0-1C2Wfr-Mul

Name of the Vulnerable Software and Affected Versions: EZVIZ CS-C6N-A0-1C2WFR versions prior to 5.3.0 build 220428 Description: The issue is related to an Improper Initialization vulnerability in the local server component, allowing a local attacker to read the contents of the memory space...

PT-2022-25500 · Bento4 · Bento4

Name of the Vulnerable Software and Affected Versions: Bento4 versions 1.6.0-639 and earlier Description: An issue was discovered that leads to a NULL pointer dereference in AP4 DescriptorListWriter::Action in Core/Ap4Descriptor.h. This issue is called from AP4 EsDescriptor::WriteFields and AP4...

PT-2022-24472 · Unknown · Church Management System

Name of the Vulnerable Software and Affected Versions: Church Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/admin/edit visitor.php" API endpoint. Recommendations: For Church...

PT-2022-20899 · Unknown · Openam Consortium Edition

Name of the Vulnerable Software and Affected Versions: OpenAM Consortium Edition version 14.0.0 Description: The issue allows an open redirect when accessing an affected server through a specially crafted URL, potentially redirecting the user to an arbitrary website. Recommendations: For OpenAM...

Rocket LMS 1.6 Shell Upload Vulnerability

Exploit Title: Rocket LMS - Learning Management System Shell Upload Exploit Author: th3d1gger Vendor Homepage: https://codecanyon.net Software Link: https://codecanyon.net/item/rocket-lms-learning-management-academy-script/33120735 Version: Version 1.6 Tested on Ubuntu 18.04 base64 encode your...

PT-2022-5136 · Dell · Dell Wyse Thinos

Name of the Vulnerable Software and Affected Versions: Dell Wyse ThinOS version 2205 Description: The issue is related to the use of a regular expression with inefficient computational complexity in the UI of Dell Wyse ThinOS. This could allow a remote attacker to cause a denial-of-service. An...

PT-2022-25443 · Ansys · Ansys Spaceclaim

Name of the Vulnerable Software and Affected Versions: Ansys SpaceClaim version 2022 R1 Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The fla...

PT-2022-5018 · WordPress · Wp 2Fa

Name of the Vulnerable Software and Affected Versions: WP 2FA WordPress plugin versions prior to 2.3.0 Description: The issue exists due to the use of comparison operators that do not mitigate time-based attacks, potentially allowing a remote attacker to leak information about authentication code...

CVE-2022-37302

CVE-2022-37302 affects Schneider Electric EcoStruxure Control Expert (formerly Unity Pro) and is described as CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer. The vulnerability can cause the Control Expert software to crash when opening an incorrect project file, ...