PT-2022-23925 · Rsa · Archer Platform

Name of the Vulnerable Software and Affected Versions: Archer Platform versions prior to 6.11 P3 6.11.0.3 Description: The issue allows a remote unauthenticated malicious user to potentially exploit a reflected XSS vulnerability by tricking a victim application user into supplying malicious...

PT-2022-24101 · Tenda · Tenda Ax1803

Name of the Vulnerable Software and Affected Versions: Tenda AX1803 version 1.0.0.1 Description: A stack overflow issue was discovered in the Tenda AX1803, specifically via the function fromSetRouteStatic. Recommendations: For Tenda AX1803 version 1.0.0.1, consider disabling the fromSetRouteStati...

PT-2022-10086 · Ericsson · Ericsson Network Manager

Name of the Vulnerable Software and Affected Versions: Ericsson Network Manager versions prior to 21.2 Description: The issue allows users belonging to the same AMOS authorization group to retrieve data from certain log files, potentially leading to privilege escalation. All AMOS users are...

PT-2022-23432 · H3C · H3C Gr-2200

Name of the Vulnerable Software and Affected Versions: H3C GR2200 MiniGR1A0V100R014 Description: A command injection issue was discovered, which can be exploited via the param parameter at the DelL2tpLNSList endpoint. Recommendations: For H3C GR2200 MiniGR1A0V100R014, consider restricting access ...

PT-2022-23424 · H3C · H3C Magic Nx18 Plus

Name of the Vulnerable Software and Affected Versions: H3C Magic NX18 Plus version NX18PV100R003 Description: A stack overflow issue was discovered via the function UpdateWanParams. Recommendations: For H3C Magic NX18 Plus version NX18PV100R003, consider disabling the UpdateWanParams function unt...

PT-2022-23888 · Mdaemon Technologies · Mdaemon Securitygateway For Email Servers

Name of the Vulnerable Software and Affected Versions: MDaemon Technologies SecurityGateway for Email Servers version 8.5.2 Description: The issue allows for IFRAME Injection via the currentRequest parameter after login, which can lead to the injection of malicious tags, resulting in IFRAME...

PT-2022-23785 · H3C · H3C Gr-1200W

Name of the Vulnerable Software and Affected Versions: H3C GR-1200W MiniGRW1A0V100R006 Description: A stack overflow issue was discovered via the function UpdateOne2One. Recommendations: For H3C GR-1200W MiniGRW1A0V100R006, consider disabling the UpdateOne2One function as a temporary workaround...

PT-2022-23426 · H3C · H3C Magic Nx18 Plus

Name of the Vulnerable Software and Affected Versions: H3C Magic NX18 Plus version NX18PV100R003 Description: A stack overflow issue was discovered via the function Edit BasicSSID. Recommendations: For H3C Magic NX18 Plus version NX18PV100R003, consider disabling the Edit BasicSSID function until...

PT-2022-23843 · Unknown · Artica Proxy

Name of the Vulnerable Software and Affected Versions: Artica Proxy version 4.30.000000 Description: An issue was discovered in Artica Proxy. There is a XSS vulnerability via the password parameter in "/fw.login.php". Recommendations: For Artica Proxy version 4.30.000000, avoid using the password...

PT-2022-23348 · Unknown · Wordplus Better Messages

Name of the Vulnerable Software and Affected Versions: WordPlus Better Messages plugin versions = 1.9.9.148 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a w...

PT-2022-4413 · Measuresoft · Measuresoft Scadapro Server

Name of the Vulnerable Software and Affected Versions: Measuresoft ScadaPro Server versions prior to 6.8.0.1 Description: The issue is related to an out-of-bounds write condition in the Measuresoft ScadaPro Server, potentially allowing an attacker to execute arbitrary code in the target system by...

PT-2022-16133 · WordPress · Download Manager

Name of the Vulnerable Software and Affected Versions: Download Manager WordPress plugin versions prior to 3.2.50 Description: The issue allows bypassing IP-based download blocking restrictions by prioritizing a visitor's IP from certain HTTP headers over PHP's REMOTE ADDR. Recommendations: For...

PT-2022-20234 · Wwbn · Wwbn Avideo

Name of the Vulnerable Software and Affected Versions: WWBN AVideo versions 11.6 Description: A cross-site scripting issue exists in the image403 functionality. This allows an attacker to execute arbitrary Javascript code through a specially-crafted HTTP request. An attacker can exploit this by...

PT-2022-22601 · Baijiacms · Baijiacms

Name of the Vulnerable Software and Affected Versions: Baijicms version 4 Description: The issue is related to an arbitrary file upload vulnerability. Recommendations: For Baijicms version 4, consider restricting access to file upload functionality until a patch is available...

PT-2022-23128 · Unknown · Project-Nexus

Name of the Vulnerable Software and Affected Versions: Project-nexus affected versions not specified Description: The issue is related to SQL injection due to a lack of sanitization of user input. This allows for potential exploitation. Users are advised to restrict user input. There is no...

PT-2022-23501 · Yimioa · Yimioa

Name of the Vulnerable Software and Affected Versions: Yimioa version 6.1 Description: A SQL injection issue was found in Yimioa via the orderbyGET parameter. This allows for potential manipulation of database queries. Recommendations: For Yimioa version 6.1, consider restricting access to the...

PT-2022-4415 · Outbyte · Outbyte Pc Repair

Name of the Vulnerable Software and Affected Versions: Outbyte PC Repair version 1.7.112.7856 Description: The issue is related to an uncontrolled search path element, which can be exploited to elevate privileges. Specifically, the iertutil.dll is missing, allowing an attacker to use a malicious...

PT-2022-18697 · Emerson Electric · Proficy Machine Edition

Name of the Vulnerable Software and Affected Versions: Emerson Electric's Proficy Machine Edition versions 9.00 and prior Description: The issue concerns a lack of integrity check support, allowing for potential data manipulation. Specifically, after establishing a connection using the SRTP...

PT-2022-22250 · Mealie · Mealie

Name of the Vulnerable Software and Affected Versions: Mealie version 1.0.0beta3 Description: The issue allows attackers to modify user passwords and other attributes via modification of the user id parameter. This is due to an Insecure Direct Object Reference IDOR vulnerability. Recommendations:...

PT-2022-22922 · Unknown · Sazanrjb Inventorymanagementsystem

Name of the Vulnerable Software and Affected Versions: sazanrjb InventoryManagementSystem version 1.0 Description: A SQL injection issue allows attackers to execute arbitrary SQL commands via the parameter customerCode in CustomerDAO.java. This enables unauthorized access and manipulation of...