PT-2022-26712 · Tenda · Tenda Tx3

Name of the Vulnerable Software and Affected Versions: Tenda TX3 version US TX3V1.0br V16.03.13.11 multi TDE01 Description: A stack overflow issue was discovered via the timeZone parameter at the "/goform/SetSysTimeCfg" API endpoint. Recommendations: For Tenda TX3 version US TX3V1.0br V16.03.13.1...

PT-2022-26717 · Bento4 · Bento4

Name of the Vulnerable Software and Affected Versions: Bento4 version 1.6.0-639 Description: An issue in the component AP4 HdlrAtom::AP4 HdlrAtom allows attackers to cause a Denial of Service DoS via a crafted input. This is due to a bad free, which can be exploited to disrupt the service...

PT-2022-26720 · Bento4 · Bento4

Name of the Vulnerable Software and Affected Versions: Bento4 version 1.6.0-639 Description: An issue was discovered in the function AP4 File::ParseStream in /Core/Ap4File.cpp, which results in a memory leak. Recommendations: For Bento4 version 1.6.0-639, consider disabling the AP4...

PT-2022-25852 · Acer · Acer Altos W2000H-W570H F4

Name of the Vulnerable Software and Affected Versions: Acer Altos W2000h-W570h F4 version R01.03.0018 Description: A stack overflow was discovered in the RevserveMem component, allowing attackers to cause a Denial of Service DoS by injecting crafted shellcode into the NVRAM variable...

PT-2022-24967 · Oracle · Oracle Transportation Management

Name of the Vulnerable Software and Affected Versions: Oracle Transportation Management versions 6.4.3 through 6.5.1 Description: The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Transportation Management. Successful attacks can result in unauthorized...

PT-2022-25923 · Unknown · Online Tours & Travels Management System

Name of the Vulnerable Software and Affected Versions: Online Tours & Travels Management System version 1.0 Description: The issue allows attackers to execute arbitrary code via a crafted PHP file, exploiting an arbitrary file upload vulnerability in the /user operations/profile.php component...

PT-2022-26815 · Tenda · Tenda Ac18

Name of the Vulnerable Software and Affected Versions: Tenda AC18 version 15.03.05.196318 Description: A stack overflow issue was discovered via the time parameter in the fromSetSysTime function. This issue can be exploited, potentially allowing for unauthorized access or control. Recommendations...

PT-2022-25928 · Unknown · Getsimple Cms

Name of the Vulnerable Software and Affected Versions: GetSimple CMS version 3.3.16 Description: The issue is a remote code execution RCE vulnerability. It can be exploited via the edited file parameter in the admin/theme-edit.php file. Recommendations: For GetSimple CMS version 3.3.16, update to...

PT-2022-22968 · Sourcecodester · Sourcecodester Canteen Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Canteen Management System version 1.0 Description: A critical issue affects the processing of the file edituser.php, where the manipulation of the id argument leads to SQL injection. This issue can be initiated remotely...

PT-2022-20227 · Gitlab · Gitlab

Name of the Vulnerable Software and Affected Versions: GitLab versions 10.0 through 15.2.5 GitLab versions 15.3 through 15.3.4 GitLab versions 15.4 through 15.4.1 Description: An issue in GitLab allows an unauthorized user to create issues in a project. Recommendations: For versions 10.0 through...

PT-2022-26325 · Unknown · Merchandise Online Store

Name of the Vulnerable Software and Affected Versions: Merchandise Online Store version 1.0 Description: A SQL Injection issue allows an attacker to log in to the admin account. Recommendations: For Merchandise Online Store version 1.0, consider temporarily restricting access to the admin login...

PT-2022-25670 · Mitre · Mitre Caldera

Name of the Vulnerable Software and Affected Versions: MITRE CALDERA version 4.1.0 Description: The issue allows stored XSS via the app.contact.gist field, also known as the gist contact configuration field, leading to the execution of arbitrary commands on agents. Recommendations: For MITRE...

PT-2022-20759 · WordPress · Wp Custom Cursors

Name of the Vulnerable Software and Affected Versions: WP Custom Cursors WordPress plugin versions prior to 3.0.1 Description: The issue is related to the lack of a CSRF check when creating and editing cursors, which could allow attackers to perform actions via CSRF attacks on logged-in admins...

PT-2022-20779 · WordPress · Wp Custom Cursors

Name of the Vulnerable Software and Affected Versions: WP Custom Cursors WordPress plugin versions prior to 3.0.1 Description: The issue concerns a lack of CSRF check when deleting cursors, potentially allowing attackers to trick logged-in admins into deleting arbitrary cursors via a CSRF attack...

PT-2022-22520 · Otfcc +1 · Otfcc +1

Name of the Vulnerable Software and Affected Versions: OTFCC commit 617837b Description: A heap buffer overflow issue was discovered in OTFCC. The issue occurs via the /release-x64/otfccdump+0x6b5567 endpoint. Recommendations: For OTFCC commit 617837b, consider restricting access to the...

PT-2022-26233 · Unknown · Online Birth Certificate Management System

Name of the Vulnerable Software and Affected Versions: Online Birth Certificate Management System version 1.0 Description: The issue concerns a Cross Site Request Forgery CSRF problem. This means an attacker could potentially trick a user into performing unintended actions on the system...

PT-2022-25978 · Unknown · Fingerprint Trusted Application

Name of the Vulnerable Software and Affected Versions: Fingerprint trusted application TA affected versions not specified Description: The issue concerns heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application. Successful exploitation may affect...

PT-2022-25925 · Unknown · Wedding Planner

Name of the Vulnerable Software and Affected Versions: Wedding Planner version 1.0 Description: The issue is related to an arbitrary file upload vulnerability in the /admin/users add.php component. This allows attackers to execute arbitrary code via a crafted PHP file. Recommendations: For Weddin...

PT-2022-21140 · Unknown · Gin-Vue-Admin

Name of the Vulnerable Software and Affected Versions: Gin-Vue-Admin versions v2.5.1 through v2.5.3beta Description: The issue allows for Unrestricted File Upload, leading to the execution of javascript code through the 'Normal Upload' functionality to the Media Library. When an admin user views...

PT-2022-25880 · Rpcms · Rpcms

Name of the Vulnerable Software and Affected Versions: RPCMS version 3.0.2 Description: A reflected cross-site scripting XSS issue was found in the Search function. This could potentially allow an attacker to inject malicious scripts into the website. Recommendations: For RPCMS version 3.0.2,...