PT-2022-22944 · Zimbra · Zimbra Collaboration Suite

Name of the Vulnerable Software and Affected Versions: Zimbra Collaboration Suite versions prior to 9.0.0 Description: The issue is related to incorrect sudo permissions, allowing a local privilege escalation where the zimbra user can coerce postfix into running arbitrary commands as root...

PT-2022-25865 · Xzs · Xzs

Name of the Vulnerable Software and Affected Versions: xzs version 3.8.0 Description: The issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title text field in the /admin/question/edit API endpoint. This enables the execution of malicious code...

PT-2022-18936 · Tenable · Nessus Essentials +2

Name of the Vulnerable Software and Affected Versions: Nessus Essentials and Professional affected versions not specified Description: The issue allows an authenticated user with debug privileges to retrieve stored Nessus policy credentials from the "nessusd" process in cleartext via process...

PT-2022-22804 · Hunter2 · Hunter2

Name of the Vulnerable Software and Affected Versions: hunter2 versions prior to 2.1.0 Description: An issue has been discovered in the improper handling of auto-completion input, allowing an authenticated attacker to extract other users' email addresses. Recommendations: For versions prior to...

PT-2022-22448 · Sourcecodester · Sourcecodester Simple Online Public Access Catalog

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Online Public Access Catalog version 1.0 Description: A critical issue has been discovered, affecting the Admin Login component, specifically the /opac/Actions.php?a=login endpoint. The manipulation of the username and...

PT-2022-25979 · Unknown · Fingerprint Trusted Application

Name of the Vulnerable Software and Affected Versions: Fingerprint trusted application TA affected versions not specified Description: The issue concerns heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application. Successful exploitation may affect...

PT-2022-24640 · Unknown · Hipp Module

Name of the Vulnerable Software and Affected Versions: HIPP module affected versions not specified Description: The issue is related to the HIPP module not verifying data transferred in the kernel space. This can lead to an out-of-bounds read when successfully exploited, affecting data...

PT-2022-22536 · Otfcc +1 · Otfcc +1

Name of the Vulnerable Software and Affected Versions: OTFCC commit 617837b Description: A heap buffer overflow issue was discovered in OTFCC, which can be exploited via the /release-x64/otfccdump+0x6c0473 endpoint. Recommendations: For OTFCC commit 617837b, consider restricting access to the...

PT-2022-24641 · Unknown · Facial Recognition Module

Name of the Vulnerable Software and Affected Versions: Facial Recognition Module affected versions not specified Description: The issue is related to a vulnerability in input validation within the facial recognition module. This could potentially impact data confidentiality if successfully...

PT-2022-5277 · D Link · D-Link Covr

Name of the Vulnerable Software and Affected Versions: D-Link COVR versions 1200, 1202, 1203 v1.08 Description: A command injection issue was found via the /SetTriggerWPS/PIN parameter at the SetTriggerWPS function. This issue is related to inadequate data cleaning at the management level, allowi...

PT-2022-5276 · D Link · D-Link Covr

Name of the Vulnerable Software and Affected Versions: D-Link COVR versions 1.08 Description: The issue is related to errors in the code of the pseudo-random number generator, which may allow a remote attacker to compromise the integrity of protected information. The pseudo-random number generato...

PT-2022-25889 · Tenda · Tenda Ac1900 +1

Name of the Vulnerable Software and Affected Versions: Tenda AC1900 version 1.180320Beta Tenda AC1200 version 15.03.06.51 Description: A buffer overflow was discovered in the 0x32384 function, allowing attackers to cause a Denial of Service DoS via a crafted request. Recommendations: For Tenda...

PT-2022-25846 · Unknown · Church Management System

Name of the Vulnerable Software and Affected Versions: Church Management System version 1.0 Description: The issue concerns an arbitrary file upload vulnerability in the /admin/admin pic.php component. This allows attackers to execute arbitrary code via a crafted PHP file. The "arbitrary file...

PT-2022-26215 · Pypi · D8S-Lists +1

Name of the Vulnerable Software and Affected Versions: d8s-lists version 0.1.0 Description: The d8s-lists package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-dicts package. Recommendations: For version...

PT-2022-22696 · Sap · Sap Enable Now

Name of the Vulnerable Software and Affected Versions: SAP Enable Now affected versions not specified Description: The issue arises from insufficient encoding of user-controlled inputs over the network, which are then placed in the output served to other users. This leads to a Stored Cross-Site...

PT-2022-26319 · Unknown · Simple Cold Storage Management System

Name of the Vulnerable Software and Affected Versions: Simple Cold Storage Management System version 1.0 Description: The issue allows for SQL Injection via the "/csms/admin/?page=user/manage user&id=" API endpoint, specifically targeting the id variable. This could potentially lead to unauthoriz...

PT-2022-37358 · Pypi · Democritus-Csv +1

Name of the Vulnerable Software and Affected Versions: d8s-ip-addresses version 0.1.0 Description: The d8s-ip-addresses package for Python contains a potential code-execution backdoor. This backdoor is attributed to the democritus-csv package, which was inserted by a third party. Recommendations:...

PT-2022-25727 · Sap · Sap Commerce

Name of the Vulnerable Software and Affected Versions: SAP Commerce versions 1905 through 2205 Description: An attacker can change the content of the SAP Commerce login page through a manipulated URL, allowing them to inject code that redirects submissions from the affected login form to their ow...

PT-2022-34855 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 5.4.212 through 5.4.214 Description: A memory leak issue exists when a blob is malformed. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions 5.4.212 through...

PT-2022-5567 · D Link · D-Link Dir-823G

Name of the Vulnerable Software and Affected Versions: D-Link DIR-823G version 1.0.2 Description: The issue is related to the implementation of the SetNetworkTomographySettings function in the D-Link DIR-823G router's firmware, which is associated with insufficient input data sanitization used in...