PT-2022-23475 · Tenda · Tenda Ac9

Name of the Vulnerable Software and Affected Versions: Tenda AC9 version 15.03.05.19 Description: A stack overflow issue was discovered via the list parameter at the "/goform/setPptpUserList" API endpoint. Recommendations: For Tenda AC9 version 15.03.05.19, avoid using the list parameter in the...

PT-2022-23259 · Unknown · Doctor Appointment System

Name of the Vulnerable Software and Affected Versions: Doctor's Appointment System version 1.0 Description: The issue allows for Cross Site Scripting XSS via the admin panel, which can lead to the takeover of the administrator account by stealing the cookie via XSS. Recommendations: For Doctor's...

PT-2022-23860 · Piwigo · Piwigo

Name of the Vulnerable Software and Affected Versions: Piwigo version 12.3.0 Description: The issue is related to Cross Site Scripting XSS and can be exploited via the "/search/1940/created-monthly-list" API endpoint. This allows for malicious scripts to be injected into the website...

PT-2022-4607 · Gitlab · Gitlab

Name of the Vulnerable Software and Affected Versions: GitLab versions 12.10 through 15.1.6 GitLab versions 15.2 through 15.2.4 GitLab versions 15.3 through 15.3.2 Description: The issue is related to incorrect authentication with some Package Registries when IP address restrictions are configure...

PT-2022-20022 · Unknown · Arnoldaldrin/Binaries

Name of the Vulnerable Software and Affected Versions: arnoldaldrin/binaries versions prior to 1 Description: A stack-based buffer overflow issue has been identified. Recommendations: For versions prior to 1, update to version 1 or later to resolve the issue...

PT-2022-23467 · Seiko · Seiko Skybridge Mb-A100/A110

Name of the Vulnerable Software and Affected Versions: Seiko SkyBridge MB-A100/A110 versions 4.2.0 and below Description: The issue concerns a hard-coded passcode for the root account, which can be accessed by attackers through the file /etc/ciel.cfg. Recommendations: For versions 4.2.0 and below...

PT-2022-23132 · Unknown · Mdx-Mermaid

Name of the Vulnerable Software and Affected Versions: mdx-mermaid versions less than 1.3.0 mdx-mermaid versions 2.0.0-rc1 Description: The issue concerns an arbitrary JavaScript injection potential in mdx-mermaid. This can be exploited by modifying mermaid code blocks with arbitrary code, which...

PT-2022-23558 · Unknown · Ingredients Stock Management System

Name of the Vulnerable Software and Affected Versions: Ingredients Stock Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/admin/?page=user/manage user&id=" endpoint. Recommendations:...

PT-2022-23505 · Totolink · Totolink A800R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A800R version 4.1.2cu.5137 B20200730 Description: The issue concerns a hardcoded password for the root user located at /etc/shadow.sample. This could potentially allow unauthorized access to the system. Recommendations: For TOTOLINK...

PT-2022-24458 · Tenda · Tenda M3

Name of the Vulnerable Software and Affected Versions: Tenda M3 version 1.0.0.124856 Description: A buffer overflow issue was found in the formSetPicListItem function, allowing attackers to cause a Denial of Service DoS by exploiting the adItemUID parameter. Recommendations: For Tenda M3 version...

PT-2022-20019 · Froxlor · Froxlor

Name of the Vulnerable Software and Affected Versions: froxlor versions prior to 0.10.38 Description: The issue is related to Cross-Site Request Forgery CSRF in the GitHub repository froxlor/froxlor. CSRF is an attack that tricks a user into performing unintended actions on a web application that...

PT-2022-24461 · Tenda · Tenda M3

Name of the Vulnerable Software and Affected Versions: Tenda M3 version 1.0.0.124856 Description: A stack overflow issue was found in the formSetAdConfigInfo function, allowing attackers to cause a Denial of Service DoS via the authIPs parameter. Recommendations: For Tenda M3 version 1.0.0.124856...

PT-2022-4464 · Totolink · Totolink A810R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A810R versions V4.1.2cu.5182 B20201026 through V5.9c.4050 B20190424 Description: The issue is related to a hardcoded password for the root user at /etc/shadow.sample. This could allow a remote attacker to elevate their privileges. Th...

PT-2022-23507 · Totolink · Totolink N600R

Name of the Vulnerable Software and Affected Versions: TOTOLINK N600R version 4.3.0cu.7647 B20210106 Description: The issue concerns a hardcoded password for the root user located at /etc/shadow.sample. This could potentially allow unauthorized access to the system. Recommendations: For TOTOLINK...

PT-2022-23454

Name of the Vulnerable Software and Affected Versions Edoc-doctor-appointment-system version 1.0.1 Description An access control issue in the component /ip/admin/ allows attackers to arbitrarily edit, read, and delete Administrator data. Recommendations For Edoc-doctor-appointment-system version...

PT-2022-23411 · H3C · H3C Magic Nx18 Plus

Name of the Vulnerable Software and Affected Versions: H3C Magic NX18 Plus version NX18PV100R003 Description: A stack overflow issue was discovered via the function EnableIpv6. Recommendations: For H3C Magic NX18 Plus version NX18PV100R003, consider disabling the EnableIpv6 function as a temporar...

PT-2022-23388 · Totolink · Totolink A3700R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3700R version 9.1.2u.6134 B20201202 Description: A stack overflow issue was discovered, which occurs via the pppoeUser parameter. Recommendations: For TOTOLINK A3700R version 9.1.2u.6134 B20201202, as a temporary workaround, conside...

PT-2022-23815 · H3C · H3C H200

Name of the Vulnerable Software and Affected Versions: H3C H200 version H200V100R004 Description: A stack overflow issue was discovered via the function UpdateSnat. Recommendations: For H3C H200 version H200V100R004, consider disabling the UpdateSnat function until a patch is available...

PT-2022-24087 · Tenda · Tenda Ac1206

Name of the Vulnerable Software and Affected Versions: Tenda AC1206 version 15.03.06.23 Description: A stack overflow issue was discovered, related to the speed dir parameter in the formSetSpeedWan function. Recommendations: For version 15.03.06.23, consider restricting access to the...

PT-2022-23882 · Mdaemon Technologies · Mdaemon Technologies Securitygateway For Email Servers

Name of the Vulnerable Software and Affected Versions: MDaemon Technologies SecurityGateway for Email Servers version 8.5.2 Description: The issue concerns a Cross Site Scripting XSS problem. It can be exploited via the "rulles list ajax" API endpoint. Recommendations: For version 8.5.2, consider...