PT-2022-34662 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.143 Description: A refcount leak and iomem leak bug has been identified. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to v5.10.143,...

PT-2022-34587 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 3.18 through 5.19.8 Description: The issue concerns absolute zero lowcore corruption on boot. It was introduced in version v3.18 and fixed in version v5.19.9. The actual impact and attack plausibility have not yet been...

PT-2022-14219 · Applock · Applock

Name of the Vulnerable Software and Affected Versions: AppLock version 7.9.29 Description: The issue allows an attacker with physical access to the device to bypass biometric authentication due to incorrect implementation of fingerprint validations. Recommendations: For AppLock version 7.9.29,...

PT-2022-10571 · WordPress · Social Media Follow Buttons Bar

Name of the Vulnerable Software and Affected Versions: Social Media Follow Buttons Bar plugin versions prior to 4.74 Description: The issue is related to an Authenticated Stored Cross-Site Scripting XSS vulnerability. This vulnerability can be exploited by an admin or higher-privileged user. The...

PT-2022-10579 · WordPress · Booking Ultra Pro

Name of the Vulnerable Software and Affected Versions: Booking Ultra Pro plugin versions 1.1.4 and earlier Description: The issue concerns multiple Cross-Site Request Forgery CSRF vulnerabilities. CSRF is a type of attack where an attacker tricks a user into performing unintended actions on a web...

PT-2022-21131 · Bytebase · Bytebase

Name of the Vulnerable Software and Affected Versions: Bytebase affected versions not specified Description: The issue concerns the Bytebase application, where low-privilege users are not restricted from accessing admin issues. This allows unauthorized users to view OPEN and CLOSED issues created...

PT-2022-21782 · Git +1 · Tooljet +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: An attacker could steal the account of different users, but in this case, it is more specific because the attacker needs to be an editor in the same app...

PT-2022-24373 · Vtiger · Vtiger Crm

Name of the Vulnerable Software and Affected Versions: Vtiger CRM version 7.4.0 Description: A stored cross-site scripting XSS issue was found in the e-mail template modules. This allows for malicious scripts to be stored and executed when the module is accessed. Recommendations: For Vtiger CRM...

PT-2022-25624 · Unknown · Online Leave Management System

Name of the Vulnerable Software and Affected Versions: Online Leave Management System version 1.0 Description: The issue concerns a SQL Injection vulnerability via the "/leave system/classes/Master.php?f=delete leave type" API endpoint. This allows for potential exploitation. No information is...

PT-2022-25234 · WordPress · Seriously Simple Podcasting

Name of the Vulnerable Software and Affected Versions: Seriously Simple Podcasting plugin versions prior to 2.16.0 Description: A Cross-Site Request Forgery CSRF issue allows for changes to plugin settings. Recommendations: For versions prior to 2.16.0, update to version 2.16.0 or later to resolv...

PT-2022-24538 · WordPress · Seo Redirection

Name of the Vulnerable Software and Affected Versions: SEO Redirection plugin versions = 8.9 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which can lead to the deletion of 404 errors and redirection history. Recommendations: For SEO Redirection plugin versions = 8.9,...

PT-2022-25286 · WordPress · Testimonial Slider

Name of the Vulnerable Software and Affected Versions: GS Testimonial Slider plugin versions prior to 1.9.7 Description: The issue concerns multiple authenticated Stored Cross-Site Scripting XSS vulnerabilities. This means that an attacker with contributor or higher privileges can inject maliciou...

PT-2022-25217 · Unknown · Online Banking System

Name of the Vulnerable Software and Affected Versions: Online Banking System version 1.0 Description: A SQL injection issue was found in the Online Banking System. The vulnerability can be exploited via the cust id parameter at the "/net-banking/edit customer.php" API endpoint. Recommendations: F...

PT-2022-25210 · Tenda · Tenda I9

Name of the Vulnerable Software and Affected Versions: Tenda i9 version 1.0.0.83828 Description: A buffer overflow issue was discovered, allowing attackers to cause a Denial of Service DoS via a crafted string. The issue is related to the formexeCommand function. Recommendations: For Tenda i9...

PT-2022-25389 · Zzcms · Zzcms

Name of the Vulnerable Software and Affected Versions: ZZCMS version 2022 Description: A full path disclosure issue was discovered in ZZCMS 2022. This issue can be exploited via the "/admin/index.PHP? server" API endpoint. Recommendations: For ZZCMS version 2022, consider restricting access to th...

PT-2022-25388 · Zzcms · Zzcms

Name of the Vulnerable Software and Affected Versions: ZZCMS version 2022 Description: An absolute path traversal issue allows attackers to obtain sensitive information via a crafted GET request sent to "/one/siteinfo.php". Recommendations: For ZZCMS version 2022, as a temporary workaround,...

PT-2022-23761 · Ahsay · Ahsaycbs

Name of the Vulnerable Software and Affected Versions: Ahsay AhsayCBS version 9.1.4.0 Description: The issue allows an authenticated system user to inject arbitrary Java JVM options. Administrators with the ability to modify the Runtime Options in the web interface can inject Java Runtime Options...

PT-2022-25750 · Jenkins · Jenkins Rundeck Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Rundeck Plugin versions 3.6.11 and earlier Description: The issue allows users with Overall/Read permission to trigger jobs configured to be triggerable via Rundeck, due to inadequate protection of access to the...

PT-2022-11822 · Keylime · Keylime

Name of the Vulnerable Software and Affected Versions: Keylime versions prior to 6.3.0 Description: A vulnerability allows an attacker to craft a request to the agent that resets the U and V keys as if the agent were being re-added to a verifier, potentially leading to remote code execution...

PT-2022-6107 · Jenkins · Jenkins Extreme-Feedback Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins extreme-feedback Plugin versions 1.7 and earlier Description: The issue is related to a missing permission check in the Jenkins extreme-feedback Plugin, allowing attackers with Overall/Read permission to access sensitive information...