PT-2022-26872 · Ip Com · Ip-Com Ew9

Name of the Vulnerable Software and Affected Versions: IP-COM EW9 version 15.11.0.149732 Description: The issue is related to an access control problem in the password reset page, allowing unauthenticated attackers to change the admin password arbitrarily. Recommendations: For IP-COM EW9 version...

PT-2022-25600 · Tenda · Tenda Ax1803

Name of the Vulnerable Software and Affected Versions: Tenda ax1803 version 1.0.0.1 Description: The issue concerns http requests handled by the fromAdvSetMacMtuWan functions, specifically the wanSpeed, cloneType, and mac variables, which can cause a stack overflow and enable remote code executio...

PT-2022-24926 · Metabase · Metabase

Name of the Vulnerable Software and Affected Versions: Metabase versions prior to 0.44.5 Metabase versions prior to 1.44.5 Metabase versions prior to 0.43.7 Metabase versions prior to 1.43.7 Metabase versions prior to 0.42.6 Metabase versions prior to 1.42.6 Description: The issue allows...

PT-2022-19878 · Open Xchange · Ox App Suite

Name of the Vulnerable Software and Affected Versions: OX App Suite versions through 7.10.6 Description: The issue allows OS Command Injection in a non-default configuration where ghostscript is used, because file conversion may occur for an EPS document disguised as a PDF document...

PT-2022-26307 · Unknown · Simple Exam Reviewer Management System

Name of the Vulnerable Software and Affected Versions: Simple Exam Reviewer Management System version 1.0 Description: The issue concerns a Cross Site Request Forgery CSRF vulnerability via the Exam List. This means an attacker could potentially trick a user into performing unintended actions on...

PT-2022-26310 · Unknown · Simple Exam Reviewer Management System

Name of the Vulnerable Software and Affected Versions: Simple Exam Reviewer Management System version 1.0 Description: The issue concerns an insecure file upload in the Simple Exam Reviewer Management System. This allows for potential malicious file uploads, which could lead to various security...

PT-2022-26305 · Unknown · Simple Exam Reviewer Management System

Name of the Vulnerable Software and Affected Versions: Simple Exam Reviewer Management System version 1.0 Description: The issue concerns improper access control in the User List function, allowing low-privileged users to modify user permissions to higher privileges. Recommendations: For Simple...

PT-2022-9075 · Sonos · Sonos One

Name of the Vulnerable Software and Affected Versions: Sonos One versions 1st and 2nd generation Description: The issue allows partial or full memory access via attacker-controlled hardware that can be attached to the Mini-PCI Express slot on the motherboard, which hosts the WiFi card on the...

PT-2022-20718 · Eve-Ng · Eve-Ng

Name of the Vulnerable Software and Affected Versions: EVE-NG version 2.0.3-112 Community Description: The issue is related to an arbitrary file upload vulnerability in the apiImportLabs function within api labs.php. This vulnerability allows attackers to execute arbitrary code by uploading a...

PT-2022-26306 · Unknown · Simple Exam Reviewer Management System

Name of the Vulnerable Software and Affected Versions: Simple Exam Reviewer Management System version 1.0 Description: The issue concerns an insecure file upload in the User List function. Recommendations: For Simple Exam Reviewer Management System version 1.0, consider restricting file uploads t...

PT-2022-26709 · Tenda · Tenda Tx3

Name of the Vulnerable Software and Affected Versions: Tenda TX3 US TX3V1.0br V16.03.13.11 multi TDE01 Description: A stack overflow issue was discovered via the startIp parameter at the "/goform/SetPptpServerCfg" API endpoint. Recommendations: For Tenda TX3 US TX3V1.0br V16.03.13.11 multi TDE01,...

PT-2022-26702 · Opencats · Opencats

Name of the Vulnerable Software and Affected Versions: OpenCATS version 0.9.6 Description: A reflected cross-site scripting XSS issue was found, which can be exploited via the entriesPerPage parameter. Recommendations: For OpenCATS version 0.9.6, avoid using the entriesPerPage parameter until a f...

PT-2022-8690 · Asus · Asus Rt-N12+

Name of the Vulnerable Software and Affected Versions: Asus RT-N12E version 2.0.0.39 Description: The issue is related to incorrect access control. An attacker can change the administrator password without authentication through the "system.asp" and "start apply.htm" API endpoints. Recommendation...

PT-2023-2657

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 8u361, 8u361-perf, 11.0.18, 17.0.6, 20 Oracle GraalVM Enterprise Edition versions 20.3.9, 21.3.5, 22.3.1 Description The issue exists due to insufficient input validation in the Swing component of Oracle Java SE and...

PT-2022-26813 · Tenda · Tenda Ac15

Name of the Vulnerable Software and Affected Versions: Tenda AC15 version 15.03.05.18 Description: A stack overflow issue was discovered via the timeZone parameter in the form fast setting wifi set function. Recommendations: For Tenda AC15 version 15.03.05.18, consider restricting access to the...

PT-2022-25897 · Eyoucms · Eyoucms

Name of the Vulnerable Software and Affected Versions: EyouCMS version 1.5.9 Description: The issue concerns multiple Cross-Site Request Forgery CSRF vulnerabilities found in EyouCMS. These vulnerabilities are present in the Members Center, Editorial Membership, and Points Recharge components...

PT-2022-6036 · Advantech · Advantech R-Seenet

Name of the Vulnerable Software and Affected Versions: Advantech R-SeeNet versions 2.4.17 and prior Description: The issue is related to a stack-based buffer overflow in Advantech R-SeeNet. This can be exploited by an unauthorized attacker to remotely overflow the stack buffer, enabling remote co...

PT-2022-26302 · Lavalite · Lavalite

Name of the Vulnerable Software and Affected Versions: Lavalite version 9.0.0 Description: The issue allows for path traversal attacks through the XSRF-TOKEN cookie, enabling read access to arbitrary files on the server. Recommendations: For Lavalite version 9.0.0, consider restricting access to...

PT-2022-6113 · Tp Link · Tp-Link Ax10V1

Name of the Vulnerable Software and Affected Versions: TP-Link AX10v1 version V1 211117 Description: The issue allows attackers to execute a replay attack by using a previously transmitted encrypted authentication message and valid authentication token, enabling them to login to the web applicati...

PT-2022-25879 · 74Cmsse · 74Cmsse

Name of the Vulnerable Software and Affected Versions: 74cmsSE version 3.12.0 Description: The issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title field. This is achieved through the /api/admin/notice/add API endpoint. Recommendations: For...