PT-2022-30502

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.20 through 5.4.188 Description The issue concerns a fix in the return value of the setup handler in kgdboc. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2022-29767

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.19 Description The issue concerns a fix in the return value of the setup handler. It was introduced in version v4.20 and fixed in version v5.16.19. The actual impact and attack plausibility have not yet bee...

PT-2022-29666

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.20 Description A refcount leak was discovered in the ill acc of setup function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.16.2...

PT-2022-30336

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.110 Description The issue concerns a fix in the return value of the setup handler in kgdboc. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions pri...

PT-2022-30277

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.111 Description A refcount leak was discovered in the ill acc of setup function. The actual impact and attack plausibility of this issue have not yet been proven. Recommendations For versions prior to...

PT-2022-29922

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.15.35 Description The issue concerns a protocol setup fix for non-1-1-X operations in the cadence-quadspi driver. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-30701

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.276 Description The issue concerns a fix in the return value of the setup handler. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-30083

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description The issue concerns a fix in the return value of the setup handler in kgdboc. It was introduced in version v4.20 and fixed in version v5.15.33. The actual impact and attack plausibility have n...

PT-2022-30767

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.311 Description The issue concerns a fix in the return value of the setup handler. It was introduced in version v4.9.137 and fixed in version v4.9.311. The actual impact and attack plausibility have not yet...

PT-2022-29241

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.4 Description The issue concerns a protocol setup fix for non-1-1-X operations in the cadence-quadspi driver. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

CVE-2022-24869: Improper Neutralization of Input During Web Page Generation

GLPI is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. In versions prior to 10.0.0 one can use ticket's followups or setup login messages with a stylesheet link. This may allow for a cross site scripting attack...

CVE-2021-43986

The setup program for the affected product configures its files and folders with full access, which may allow unauthorized users permission to replace original binaries and achieve privilege escalation...

CVE-2021-43986

The setup program for the affected product configures its files and folders with full access, which may allow unauthorized users permission to replace original binaries and achieve privilege escalation...

CVE-2021-43986

CVE-2021-43986 affects FANUC ROBOGUIDE (simulation platform). The issue stems from the setup program configuring files/folders with full access, allowing an attacker with SYSTEM-level access to overwrite binaries and escalate privileges. This is part of a broader set of ROBOGUIDE vulnerabilities ...

CVE-2021-43986 ICSA-22-109-03 FANUC ROBOGUIDE Simulation Platform

The setup program for the affected product configures its files and folders with full access, which may allow unauthorized users permission to replace original binaries and achieve privilege escalation...

eu.lundegaard.liferay:liferay-db-setup-core (>=3.1.0, <=3.2.0) potentially affected by CVE-2022-26595 via com.liferay.portal:com.liferay.portal.impl (5.13.3)

com.liferay.portal:com.liferay.portal.impl MAVEN version 5.13.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.impl and may be impacted: - eu.lundegaard.liferay:liferay-db-setup-core =3.1.0, =3.2.0 Source cves:...

eu.lundegaard.liferay:liferay-db-setup-core (3.0.0) potentially affected by CVE-2022-26595 via com.liferay.portal:com.liferay.portal.impl (4.2.5)

com.liferay.portal:com.liferay.portal.impl MAVEN version 4.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.impl and may be impacted: - eu.lundegaard.liferay:liferay-db-setup-core 3.0.0 Source cves: CVE-2022-265...

PT-2022-11966 · Fanuc · Roboguide

Name of the Vulnerable Software and Affected Versions: Affected product affected versions not specified Description: The setup program for the affected product configures its files and folders with full access, which may allow unauthorized users permission to replace original binaries and achieve...

CWA 2202 : Published desktop fails to launch when CWA is used

-- Issue with CWA only -- Same endpoint works when same VDA is launched from Store URL -- Issue with 1 end point only -- Never worked on the CWA -- First time set up Details...

PT-2022-13577 · Siteground · Siteground Security Plugin

Name of the Vulnerable Software and Affected Versions: SiteGround Security plugin for WordPress versions up to, and including, 1.2.5 Description: The issue allows unauthenticated users to log in as administrative users due to missing identity verification on initial 2FA set-up. This enables...