PT-2022-27035 · Ibm · Ibm Navigator For I

Name of the Vulnerable Software and Affected Versions: IBM Navigator for i versions 7.3 through 7.5 Description: The issue allows an authenticated user to access the file system and download files they are authorized to, but not while using this interface. The remote authenticated user can bypass...

PT-2022-11666 · Unknown · Panicsteve W2Wiki

Name of the Vulnerable Software and Affected Versions: panicsteve w2wiki affected versions not specified Description: A problematic issue has been found in the function toHTML of the file index.php of the component Markdown Handler, leading to cross-site scripting. The attack can be launched...

PT-2022-27890 · Tenda · Tenda F1203

Name of the Vulnerable Software and Affected Versions: Tenda F1203 version 2.0.1.6 Description: A buffer overflow issue was discovered, which can be triggered via the limitSpeedUp parameter at the "/goform/SetClientState" API endpoint. Recommendations: For Tenda F1203 version 2.0.1.6, avoid using...

PT-2022-27894 · Tenda · Tenda F1203

Name of the Vulnerable Software and Affected Versions: Tenda F1203 version 2.0.1.6 Description: A buffer overflow issue was discovered via the entrys parameter at the "/goform/addressNat" API endpoint. Recommendations: For Tenda F1203 version 2.0.1.6, consider restricting access to the...

PT-2022-27867 · NetGear · Netgear Wnr2000V1

Name of the Vulnerable Software and Affected Versions: Netgear WNR2000v1 versions 1.2.3.7 and earlier Description: An exploitable firmware modification vulnerability was discovered on the Netgear WNR2000v1 router. An attacker can conduct a Man-in-the-Middle MITM attack to modify the user-uploaded...

PT-2022-27869 · Tp Link · Tp-Link Tl-Wr1043Nd

Name of the Vulnerable Software and Affected Versions: TP-Link TL-WR1043ND V1 versions 3.13.15 and earlier Description: The issue allows authenticated attackers to execute arbitrary code or cause a Denial of Service DoS via uploading a crafted firmware image during the firmware update process...

PT-2022-27757 · Tp Link · Tp-Link Tl-Wr940N

Name of the Vulnerable Software and Affected Versions: TP-Link TL-WR940N V4 versions 3.16.9 and earlier Description: The issue allows authenticated attackers to cause a Denial of Service DoS via uploading a crafted firmware image during the firmware update process. Recommendations: For TP-Link...

in add function forgot to add not zero for minimum lp

Lines of code Vulnerability details Impact problems in the calculation of the system Proof of Concept requirebaseTokenAmount 0 && fractionalTokenAmount 0, "Input token amount is zero"; Tools Used manually Recommended Mitigation Steps add checks like basetoken --- The text was updated successfully...

PT-2022-6389 · Adobe · Bridge

Name of the Vulnerable Software and Affected Versions: Adobe Bridge versions 12.0.3 and earlier Adobe Bridge versions 13.0.1 and earlier Description: The issue is related to an out-of-bounds write operation in memory. Exploitation of this issue could allow an attacker to execute arbitrary code...

PT-2022-27709 · Unknown · Shoplazza Lifestyle

Name of the Vulnerable Software and Affected Versions: Shoplazza LifeStyle version 1.1 Description: A vulnerability has been found in the Announcement Handler component, affecting an unknown functionality of the file /admin/api/theme-edit/. The manipulation of the Text and Mobile Text arguments...

PT-2022-27646 · Unknown · 1J01 Mind-Map

Name of the Vulnerable Software and Affected Versions: 1j01 mind-map affected versions not specified Description: A vulnerability was found in 1j01 mind-map and classified as problematic. This issue affects some unknown processing of the file app.coffee. The manipulation of the argument html lead...

PT-2022-14728 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: In the onPreferenceClick method of AccountTypePreferenceLoader.java, there is a possible way to retrieve protected files from the Settings app due to a confused deputy. This could lead to local...

PT-2022-14748 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: A side channel information disclosure issue exists in the WifiManager.java file, specifically in the registerLocalOnlyHotspotSoftApCallback function. This issue could allow an attacker to determine...

PT-2022-27997 · Apache · Apache Zeppelin

Name of the Vulnerable Software and Affected Versions: Apache Zeppelin versions prior to 0.8.2 Description: An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' issue allows logged-in users to execute arbitrary javascript in other users' browsers. Recommendations:...

PT-2022-27395 · Openemr · Openemr

Name of the Vulnerable Software and Affected Versions: openemr versions prior to 7.0.0.2 Description: The issue concerns an unrestricted upload of a file with a dangerous type in the GitHub repository openemr/openemr. Recommendations: For versions prior to 7.0.0.2, update to version 7.0.0.2 or...

PT-2022-20267 · Unknown · Quanos Schema St4

Name of the Vulnerable Software and Affected Versions: Quanos SCHEMA ST4 versions Bootstrap 2019 v2 through 2022 SP1 v1 Description: The issue allows a remote attacker to perform JavaScript injection, potentially hijacking existing sessions to access other web services in the same environment or...

PT-2022-27320 · D Link · D-Link Dir-3040

Name of the Vulnerable Software and Affected Versions: D-Link DIR-3040 version 120B03 Description: A command injection issue was discovered in the D-Link DIR-3040 device. The vulnerability is related to the SetTriggerLEDBlink function, which allows for command injection. Recommendations: For D-Li...

PT-2022-27110 · WordPress · Permalink Manager Lite

Name of the Vulnerable Software and Affected Versions: Permalink Manager Lite plugin for WordPress versions up to, and including 2.2.20.3 Description: The issue arises from improper output escaping on post/page/media titles, allowing Stored Cross-Site Scripting attacks. This enables attackers to...

PT-2022-6344 · Delta Electronics · Dx-2100-L1-Cn

Name of the Vulnerable Software and Affected Versions: Delta Electronics DX-2100-L1-CN version 2.42 Description: The issue exists due to the lack of neutralization of special elements used in the operating system command by the lform/net diagnose component of the Delta Electronics DX-2100-L1-CN...

PT-2022-5996 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.14 and earlier Description: The issue is a reflected Cross-Site Scripting XSS vulnerability. It can be exploited if an attacker convinces a victim to visit a URL referencing a vulnerable page, allowing...