PT-2022-24428 · Lief · Lief

Name of the Vulnerable Software and Affected Versions: LIEF version 365a16a Description: A reachable assertion abort was discovered in the BinaryStream.hpp component. Recommendations: For LIEF version 365a16a, consider disabling the use of the BinaryStream.hpp component until a patch is available...

PT-2022-24780 · Siemens · Parasolid +1

Name of the Vulnerable Software and Affected Versions: Parasolid versions prior to V33.1.263 Parasolid V34.0 versions prior to V34.0.252 Parasolid V34.1 versions prior to V34.1.242 Parasolid V35.0 versions prior to V35.0.164 Simcenter Femap V2022.1 versions prior to V2022.1.3 Simcenter Femap...

PT-2022-15367 · Ibm · Ibm Control Desk

Name of the Vulnerable Software and Affected Versions: IBM Control Desk version 7.6.1 Description: The issue allows attackers to obtain cookie values by sending an http link to a user or planting this link in a site the user visits. When the user clicks the link, the cookie will be sent to the...

PT-2022-25011 · Nokia · Nokia 1350 Oms

Name of the Vulnerable Software and Affected Versions: NOKIA 1350 OMS version R14.2 Description: The issue involves insufficiently protected credentials, specifically a cleartext administrator password, found on the edit configuration page. This can be exploited by an authenticated attacker. The...

PT-2022-23865 · Cuppacms · Cuppacms

Name of the Vulnerable Software and Affected Versions: CuppaCMS version 1.0 Description: The issue allows an authenticated user to read system files via a crafted POST request. This is achieved by using the function parameter value as a Local File Inclusion LFI payload in the "cuppa/api/index.php...

PT-2022-24354 · Unknown · Online Leave Management System

Name of the Vulnerable Software and Affected Versions: Online Leave Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/maintenance/manage leave type.php" API endpoint. Recommendations:...

PT-2022-24352 · Unknown · Online Leave Management System

Name of the Vulnerable Software and Affected Versions: Online Leave Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/maintenance/manage department.php" API endpoint. Recommendations:...

PT-2022-19201 · Unknown · Aenrich Ehrd Learning Management Key Performance Indicator System

Name of the Vulnerable Software and Affected Versions: aEnrich eHRD Learning Management Key Performance Indicator System version 5+ Description: The issue concerns the exposure of sensitive information to unauthorized actors. Recommendations: For version 5+, consider restricting access to sensiti...

PT-2022-24321 · Unknown · Apartment Visitor Management System

Name of the Vulnerable Software and Affected Versions: Apartment Visitor Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the editid parameter at the "/avms/edit-apartment.php" API endpoint. There is no...

PT-2022-23185 · Unknown · Xwiki Platform

Name of the Vulnerable Software and Affected Versions: XWiki Platform versions prior to 13.10.5 and 14.3 Description: The issue allows for a Cross-Site Request Forgery CSRF attack, enabling the addition or removal of tags on XWiki pages. Recommendations: For versions prior to 13.10.5, update to...

PT-2022-20882 · Rdiffweb · Rdiffweb

Name of the Vulnerable Software and Affected Versions: rdiffweb versions prior to 2.4.1 Description: The issue is related to improper restriction of rendered UI layers or frames, allowing attackers to perform clickjacking attacks. This can trick victims into performing actions such as entering...

PT-2022-10328 · NetGear · Netgear R8000 Router

Name of the Vulnerable Software and Affected Versions: Netgear R8000 Router version 1.0.4.56 Description: A buffer overflow issue allows remote attackers to execute arbitrary code or cause a denial-of-service. This is achieved by sending a crafted POST to "/bd genie create account.cgi" with a...

PT-2022-14128 · Sophos · Sophos Firewall

Name of the Vulnerable Software and Affected Versions: Sophos Firewall versions prior to 18.5 MR4 Sophos Firewall versions prior to 19.0 MR1 Description: The issue concerns multiple SQL injection vulnerabilities in the Webadmin component of Sophos Firewall. These vulnerabilities can be exploited ...

PT-2022-24311 · Mtr +1 · Mtr +1

Name of the Vulnerable Software and Affected Versions: Nagios XI version 5.8.6 MTR component version 1.0.4 Description: A cross-site scripting XSS issue was found in Nagios XI via the MTR component. This allows for potential malicious script execution. Recommendations: For Nagios XI version 5.8.6...

PT-2022-24066 · Phicomm · Phicomm Fir303B A2 +3

Name of the Vulnerable Software and Affected Versions: Phicomm FIR151B A2, FIR302E A2, FIR300B A2, FIR303B A2 routers versions 3.0.1.17 and earlier Description: A remote command execution issue was found, which can be exploited via the trHops parameter of the tracert function. Recommendations: Fo...

PT-2022-24314 · Nagios Xi · Nagios Xi

Name of the Vulnerable Software and Affected Versions: Nagios XI version 5.8.6 Description: A cross-site scripting XSS issue was found in Nagios XI via the System Performance Settings page under the Admin panel. This allows for potential malicious script execution. Recommendations: For Nagios XI...

PT-2022-6606 · D Link · D-Link Dap-2020 +1

Name of the Vulnerable Software and Affected Versions: D-Link DAP-1360 affected versions not specified D-Link DAP-2020 affected versions not specified Description: This issue allows network-adjacent attackers to disclose sensitive information on affected installations of D-Link routers...

PT-2022-9890 · Unknown · Geonetwork

Name of the Vulnerable Software and Affected Versions: GeoNetwork versions 3.4.0 through 3.12.0 GeoNetwork versions 4.0.0 through 4.0.3 Description: A privileged attacker can use the directory harvester before-script to execute arbitrary OS commands remotely on the hosting infrastructure. This...

PT-2022-23494 · Mapper · Mapper

Name of the Vulnerable Software and Affected Versions: Mapper versions 4.0.0 through 4.2.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the ids parameter at the selectByIds function. Recommendations: For Mapper versions 4.0.0 through...

PT-2022-9680 · Avaya · Avaya Ip Office Usb Creator +1

Name of the Vulnerable Software and Affected Versions: Avaya IP Office Admin Lite and USB Creator versions 11.1 Feature Pack 2 Service Pack 1 and earlier Description: A privilege escalation issue was discovered that may allow a local user to escalate privileges. Recommendations: For Avaya IP Offi...