PT-2022-16416 · Tcl · Tcl Linkhub Mesh Wi-Fi

Name of the Vulnerable Software and Affected Versions: TCL LinkHub Mesh Wi-Fi MS1G 00 01.00 14 Description: A buffer overflow vulnerability exists in the GetValue functionality. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to...

PT-2022-21846 · Nfc · Nfc

Name of the Vulnerable Software and Affected Versions: NFC prior to SMR Aug-2022 Release 1 Description: The issue is related to an improper restriction of broadcasting Intent in ConfirmConnectActivity, which leaks the MAC address of the connected Bluetooth device. Recommendations: For NFC prior t...

PT-2022-18557 · Tcl · Tcl Linkhub Mesh Wi-Fi

Name of the Vulnerable Software and Affected Versions: TCL LinkHub Mesh Wi-Fi MS1G 00 01.00 14 Description: A denial of service issue exists in the confctl set guest wlan functionality. It can be triggered by a specially-crafted network packet, leading to denial of service. An attacker can exploi...

PT-2022-18093 · Sourcecodester · Sourcecodester Apartment Visitor Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Apartment Visitor Management System version 1.0 Description: A problematic issue has been found, affecting the /manage-apartment.php file. The manipulation of the Apartment Number argument with the input alert1 leads to...

PT-2022-16411 · Tcl · Tcl Linkhub Mesh Wi-Fi

Name of the Vulnerable Software and Affected Versions: TCL LinkHub Mesh Wi-Fi MS1G 00 01.00 14 Description: A buffer overflow issue exists in the GetValue functionality. This can be triggered by a specially-crafted configuration value, leading to a buffer overflow. An attacker can exploit this by...

PT-2022-16421 · Tcl · Tcl Linkhub Mesh Wi-Fi

Name of the Vulnerable Software and Affected Versions: TCL LinkHub Mesh Wi-Fi MS1G 00 01.00 14 Description: A buffer overflow vulnerability exists in the GetValue functionality. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to...

PT-2022-16409 · Tcl · Tcl Linkhub Mesh Wi-Fi

Name of the Vulnerable Software and Affected Versions: TCL LinkHub Mesh Wi-Fi MS1G 00 01.00 14 Description: A buffer overflow issue exists in the GetValue functionality. This can be triggered by a specially-crafted configuration value, leading to a buffer overflow. An attacker can modify a...

PT-2022-18069 · Unknown · Sourcecodester Apartment Visitor Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Apartment Visitor Management System version 1.0 Description: A critical issue has been found, affecting an unknown part of the file index.php. The manipulation of the username argument with a specific input leads to SQL...

PT-2022-6671 · Asus · Asuswrt

Name of the Vulnerable Software and Affected Versions: Asuswrt versions prior to 3.0.0.4.386 48706 Asuswrt-Merlin New Gen versions prior to 386.7 Description: A memory corruption issue exists in the httpd unescape functionality. This can be triggered by a specially-crafted HTTP request, leading t...

PT-2022-18084 · Sourcecodester · Sourcecodester Interview Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Interview Management System version 1.0 Description: A critical issue affects the processing of the file /viewReport.php, where the manipulation of the id argument with a specific input leads to SQL injection. The attack can be...

CLSA-2022-1659643989 Fixed CVEs in java-1.8.0-openjdk: CVE-2022-21541, CVE-2022-21540, CVE-2022-34169

Upgrade to openjdk-shenandoah-jdk8u-shenandoah-jdk8u342-b07. That fixes following CVEs: - CVE-2022-34169: Integer truncation issue in Xalan-J - CVE-2022-21540: Class compilation issue - CVE-2022-21541: Improper restriction of MethodHandle.invokeBasic - Update tzdata requirement to 2022a to match...

CLSA-2022-1659643853 Fixed CVEs in java-1.8.0-openjdk: CVE-2022-34169, CVE-2022-21540, CVE-2022-21541

Upgrade to openjdk-shenandoah-jdk8u-shenandoah-jdk8u342-b07. That fixes following CVEs: - CVE-2022-34169: Integer truncation issue in Xalan-J - CVE-2022-21540: Class compilation issue - CVE-2022-21541: Improper restriction of MethodHandle.invokeBasic - Update tzdata requirement to 2022a to match...

Fixed CVEs in java-1.8.0-openjdk: CVE-2022-21541, CVE-2022-34169, CVE-2022-21540

Upgrade to openjdk-shenandoah-jdk8u-shenandoah-jdk8u342-b07. That fixes following CVEs: - CVE-2022-34169: Integer truncation issue in Xalan-J - CVE-2022-21540: Class compilation issue - CVE-2022-21541: Improper restriction of MethodHandle.invokeBasic - Update tzdata requirement to 2022a to match...

PT-2022-18262 · Apache · Apache Jspwiki

Name of the Vulnerable Software and Affected Versions: Apache JSPWiki versions up to and including 2.11.2 Description: A carefully crafted request on the "XHRHtml2Markup.jsp" endpoint could trigger an issue, allowing an attacker to execute javascript in the victim's browser and potentially obtain...

CWA for Android: Users cannot upload file in Websites delivered through Secure Private Access

File upload options in websites published via Secure Private Access are disabled when accessed via CWA for Android...

Unable To Verify Signature If There Are Too Many Signers And Operators

Lines of code Vulnerability details It was observed that there is a nested for loop within the AxelarAuthWeighted.validateSignatures function. If there are a large number of signatures and operators, it will result in an "Out of Gas" error or a "Block Gas Limit" error and the command's signature...

CentOS: Security Advisory for java-11-openjdk (CESA-2022:5687)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

PT-2022-22248 · Mealie · Mealie

Name of the Vulnerable Software and Affected Versions: Mealie version 0.5.5 Description: A stored cross-site scripting XSS vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Shopping Lists item names text field. This enables attackers t...

PT-2022-22818 · Unknown · Web Based Quiz System

Name of the Vulnerable Software and Affected Versions: Web Based Quiz System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the qid parameter at the "update.php" endpoint. Recommendations: For Web Based Quiz System version...

PT-2022-22817 · Unknown · Online Tours & Travels Management System

Name of the Vulnerable Software and Affected Versions: Online Tours And Travels Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the pname parameter at the "/admin/operations/packages.php" API endpoint...