PT-2022-25434 · Ansys · Ansys Spaceclaim

Name of the Vulnerable Software and Affected Versions: Ansys SpaceClaim version 2022 R1 Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The fla...

PT-2022-20040 · Cms8000 · Cms8000

Name of the Vulnerable Software and Affected Versions: CMS8000 affected versions not specified Description: The CMS8000 device does not properly control or sanitize the SSID name of a new Wi-Fi access point. A threat actor could create an SSID with a malicious name, including non-standard...

PT-2022-5072 · Brocade · Brocade Fabric Os

Name of the Vulnerable Software and Affected Versions: Brocade Fabric OS versions prior to 9.1.0 Brocade Fabric OS versions prior to 9.0.1e Brocade Fabric OS versions prior to 8.2.3c Brocade Fabric OS versions prior to 8.2.0cbn5 Description: A privilege escalation issue in Brocade Fabric OS CLI...

PT-2022-20687 · Penta Security Systems Inc · Wapples

Name of the Vulnerable Software and Affected Versions: Penta Security Systems Inc WAPPLES version 6.0 r3 4.10-hotfix1 Description: An arbitrary file download issue exists in the downloadAction function, allowing attackers to download arbitrary files via a crafted POST request. Recommendations: Fo...

PT-2022-23277 · Unknown · Sazanrjb Inventorymanagementsystem

Name of the Vulnerable Software and Affected Versions: sazanrjb InventoryManagementSystem version 1.0 Description: A SQL injection issue in CustomerDAO.java allows attackers to execute arbitrary SQL commands via parameters such as searchTxt. This enables unauthorized access and manipulation of...

PT-2022-21542 · Apple · Ios +2

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.7 macOS Ventura versions prior to 13 iOS versions prior to 16 watchOS versions prior to 9 macOS Monterey versions prior to 12.6 Description: A logic issue was addressed with improved state management, which could...

PT-2022-25347 · Sysaid · Sysaid Help Desk

Name of the Vulnerable Software and Affected Versions: SysAid Help Desk versions prior to 22.1.65 Description: The issue allows for XSS. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents where this issue was...

PT-2022-25350 · Sysaid · Sysaid Help Desk

Name of the Vulnerable Software and Affected Versions: SysAid Help Desk versions prior to 22.1.65 Description: The issue allows for XSS via the Asset Dashboard. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world...

PT-2022-23677 · Unknown · Waterplugin

Name of the Vulnerable Software and Affected Versions: Waterplugin versions prior to 2.2.11.22081151 Description: The issue is related to an improper restriction of broadcasting Intent in the GalaxyStoreBridgePageLinker of the Waterplugin, which leaks the MAC address of the connected Bluetooth...

PT-2022-24336 · Jfinalcms · Jfinalcms

Name of the Vulnerable Software and Affected Versions: JFinal CMS version 5.1.0 Description: The issue is related to SQL Injection, which can be exploited via the "/admin/site/list" API endpoint. This allows for potential unauthorized access to sensitive data. Recommendations: For JFinal CMS...

PT-2022-12239 · Unknown · Active Intelligent Visualization

Name of the Vulnerable Software and Affected Versions: Active Intelligent Visualization version 5 Description: An issue was discovered where the Vdc header is used in a SQL query without being sanitized, causing SQL injection. Recommendations: For Active Intelligent Visualization version 5,...

PT-2022-24324 · Unknown · School Activity Updates With Sms Notification

Name of the Vulnerable Software and Affected Versions: School Activity Updates with SMS Notification version 1.0 Description: The issue is related to a SQL injection vulnerability. It can be exploited via the /modules/modstudent/index.php?view=edit&id= component. Recommendations: For School...

PT-2022-24310 · Nagios Xi · Nagios Xi

Name of the Vulnerable Software and Affected Versions: Nagios XI versions prior to 5.8.7 Description: The issue concerns multiple cross-site scripting XSS vulnerabilities found in Nagios XI. These vulnerabilities are located at the auditlog.php endpoint. Recommendations: For versions prior to...

PT-2022-16604 · Ecwid · Ecwid Ecommerce Shopping Cart

Name of the Vulnerable Software and Affected Versions: Ecwid Ecommerce Shopping Cart plugin for WordPress versions up to, and including, 6.10.23 Description: The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the ecwid update plugin params function...

PT-2022-24111 · Totolink · Totolink A860R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A860R version 4.1.2cu.5182 B20201027 Description: The issue is related to a buffer overflow caused by unfiltered parameters in the infostat.cgi endpoint. This can lead to a buffer overflow vulnerability. Recommendations: For TOTOLINK...

PT-2022-23521 · Unknown · Garage Management System

Name of the Vulnerable Software and Affected Versions: Garage Management System version 1.0 Description: The issue is related to a persistent cross-site scripting XSS vulnerability. This vulnerability can be exploited via the brand name parameter at the "/brand.php" API endpoint. Recommendations:...

PT-2022-23520 · Unknown · Garage Management System

Name of the Vulnerable Software and Affected Versions: Garage Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/print.php" API endpoint. Recommendations: For Garage Management System...

PT-2022-23498 · Innosilicon · Innosilicon A10

Name of the Vulnerable Software and Affected Versions: InnoSilicon A10 version a10 20200924 120556 Description: A remote code execution issue was found in the setPlatformAPI function, allowing for potential exploitation. Recommendations: For InnoSilicon A10 version a10 20200924 120556, as a...

PT-2022-4593 · Weave · Weave Gitops Enterprise

Name of the Vulnerable Software and Affected Versions: Weave GitOps Enterprise versions prior to 0.9.0-rc.5 Description: The issue is related to a lack of input data sanitization, which can be exploited by a remote attacker to conduct a cross-site scripting XSS attack using a specially crafted...

PT-2022-23824 · D Link · Dir-816

Name of the Vulnerable Software and Affected Versions: D-link DIR-816 A2 version 1.10CNB04 Description: The issue is related to command injection via the /goform/NTPSyncWithHost API endpoint. This allows for potential malicious commands to be executed. There is no information provided about the...