PT-2022-27556 · Tenda · Tenda W30E

Name of the Vulnerable Software and Affected Versions: Tenda W30E version 1.0.1.25633 Description: A stack overflow issue was discovered, which can be triggered via the page parameter at the "/goform/webExcptypemanFilter" API endpoint. Recommendations: For Tenda W30E version 1.0.1.25633, consider...

PT-2022-36345 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.155 Description: A possible memory leak was identified in the mousevsc probe function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior t...

PT-2022-36623 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.9.333 Description: The issue is related to a memory leak in the nfs4 module when slot allocation fails. The actual impact and potential for attack have not been proven yet. Recommendations: For Linux Kernel...

PT-2022-27558 · Tenda · Tenda W30E

Name of the Vulnerable Software and Affected Versions: Tenda W30E version 1.0.1.25633 Description: A stack overflow issue was discovered, which can be triggered via the page parameter at the "/goform/NatStaticSetting" API endpoint. Recommendations: For Tenda W30E version 1.0.1.25633, consider...

PT-2022-27550 · Tenda · Tenda W30E

Name of the Vulnerable Software and Affected Versions: Tenda W30E version 1.0.1.25633 Description: A stack overflow issue was discovered via the new account parameter at the "/goform/editUserName" API endpoint. This issue affects the specified version of the Tenda W30E device. Recommendations: Fo...

PT-2022-36557 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.300 Description: A memory leak issue was discovered in the macvlan component of the Linux Kernel. The issue was introduced in version v4.9 and is fixed in version v4.14.300. The actual impact and attack...

PT-2022-36333 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.154 Description: A potential issue exists in the ext4 file system where a directory entry with an invalid rec len can trigger a BUG ON condition. The actual impact and attack plausibility of this issue hav...

PT-2022-27564 · Tenda · Tenda W30E

Name of the Vulnerable Software and Affected Versions: Tenda W30E version 1.0.1.25633 Description: A stack overflow issue was discovered via the page parameter at the "/goform/SafeClientFilter" API endpoint. Recommendations: For Tenda W30E version 1.0.1.25633, avoid using the page parameter in th...

PT-2022-27546 · Tenda · Tenda W6-S

Name of the Vulnerable Software and Affected Versions: Tenda W6-S version 1.0.0.4510 Description: The issue affects the component tpi systool handle0 and is related to the API endpoint /goform/SysToolRestoreSet. This allows unauthenticated attackers to arbitrarily reboot the device...

PT-2022-36324 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 2.6.38 through 5.10.154 Description: A potential issue exists in the nilfs2 filesystem, specifically a deadlock in the nilfs count free blocks function. The actual impact and attack plausibility have not yet been proven...

PT-2022-23978 · Ricoh · Aficio Sp 4210N

Name of the Vulnerable Software and Affected Versions: Aficio SP 4210N firmware versions prior to Web Support 1.05 Description: A cross-site scripting issue allows a remote authenticated attacker with administrative privileges to inject an arbitrary script. Recommendations: For Aficio SP 4210N...

PT-2022-27330 · Py7Zr +2 · Py7Zr +2

Name of the Vulnerable Software and Affected Versions: py7zr versions 0.20.0 and earlier Description: A directory traversal issue in the SevenZipFile.extractall function allows attackers to write arbitrary files by extracting a crafted 7z file. Recommendations: For py7zr versions 0.20.0 and...

PT-2022-27373 · Unknown · Slims9 Bulian

Name of the Vulnerable Software and Affected Versions: SLiMS 9 Bulian version 9.5.0 Description: A SQL injection issue was found via the keywords parameter. Recommendations: For SLiMS 9 Bulian version 9.5.0, avoid using the keywords parameter until the issue is resolved...

PT-2022-26519 · Unknown · Feminer Wms

Name of the Vulnerable Software and Affected Versions: FeMiner wms affected versions not specified Description: A critical issue has been found in FeMiner wms, affecting some unknown functionality of the file "/product/savenewproduct.php?flag=1". The manipulation of the upfile argument leads to...

PT-2022-27438 · Unknown · Book Store Management System

Name of the Vulnerable Software and Affected Versions: Book Store Management System version 1.0.0 Description: A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter under the Add New System User module...

PT-2022-27539 · Unknown · Lazy Mouse

Name of the Vulnerable Software and Affected Versions: Lazy Mouse affected versions not specified Description: The issue allows an attacker in a man-in-the-middle position between the server and a connected device to see all data, including keypresses, in cleartext. Recommendations: At the moment...

PT-2022-27593 · Tenda · Tenda Ac6V1.0

Name of the Vulnerable Software and Affected Versions: Tenda AC6V1.0 version 15.03.05.19 Description: A buffer overflow issue was discovered via the list parameter in the formSetVirtualSer function. This issue can be exploited, potentially leading to unauthorized access or control. Recommendation...

PT-2022-27588 · Tenda · Tenda Ac6

Name of the Vulnerable Software and Affected Versions: Tenda AC6V1.0 version 15.03.05.19 Description: A buffer overflow issue was discovered via the limitSpeed parameter in the formSetClientState function. This allows for potential exploitation. Recommendations: For Tenda AC6V1.0 version...

PT-2022-27585 · Tenda · Tenda Ac6V1.0

Name of the Vulnerable Software and Affected Versions: Tenda AC6V1.0 version 15.03.05.19 Description: A buffer overflow issue was discovered via the deviceId parameter in the formSetClientState function. This issue can be exploited, potentially leading to unintended consequences. Recommendations:...

PT-2022-27190 · Unknown · Solarview Compact

Name of the Vulnerable Software and Affected Versions: SolarView Compact versions 4.0 through 5.0 Description: The issue allows for Unrestricted File Upload via a crafted php file. Recommendations: For SolarView Compact versions 4.0 through 5.0, consider restricting the upload of php files to...