PT-2022-33723 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.65 Description: The issue concerns the Linux Kernel, where a problem with kprobes could potentially lead to security vulnerabilities. The actual impact and attack plausibility have not yet been proven...

PT-2022-33704 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.64 Description: A data-race issue exists around netdev budget. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to v5.15.64, update to...

PT-2022-33470 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.10 through v5.19.1 Description: A refcount leak bug was discovered in the ASoC: mt6359 component. The actual impact and attack plausibility of this issue have not yet been proven. Recommendations: For Linux Kernel...

PT-2022-33490 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v3.3 through v5.19.1 Description: A use-after-free issue was discovered. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions v3.3 through v5.19.1, update to...

PT-2022-33234 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.8 Description: A memory corruption issue was discovered, potentially leading to security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This issue was introduced in...

PT-2022-33659 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.66 Description: A memory corruption issue was discovered, potentially leading to security vulnerabilities. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2022-33504 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v3.12 through v5.19.1 Description: A memory leak issue has been identified. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions v3.12 through v5.19.1, update to...

PT-2022-33599 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: The issue is related to the Linux Kernel, where the kasan kernel address sanitizer does not instrument stacktrace.c on arm64 architectures. The actual impact and attack plausibility have not...

PT-2022-33380 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.14 through v5.19.3 Description: A potential memory leak issue exists in the rpc sysfs xprt state change function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2022-33549 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: A memory leak issue was discovered in the tw686x video init function. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v4.7 and is fix...

PT-2022-33226 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.8 Description: The issue is related to an integer overflow in the gnttab dma alloc pages function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2022-24383 · Unknown +1 · Leagueflysystemcachedstoragepsr6Cache +1

Name of the Vulnerable Software and Affected Versions: ThinkPHP version 6.0.13 Description: The issue is related to a deserialization vulnerability via the LeagueFlysystemCachedStoragePsr6Cache component. This allows attackers to execute arbitrary code by using a crafted payload. Recommendations:...

PT-2022-19966 · Milesight · Milesight Video Management Systems

Name of the Vulnerable Software and Affected Versions: Milesight Video Management Systems VMS versions prior to 40.7.0.79-r1 Description: The issue is caused by improper input handling at the camera's web-based management interface. A remote attacker could exploit this by sending a specially...

PT-2022-16828 · Ezviz · Ezviz Cs-C6N-A0-1C2Wfr-Mul

Name of the Vulnerable Software and Affected Versions: EZVIZ CS-C6N-A0-1C2WFR versions prior to 5.3.0 build 220428 Description: The issue is related to an Improper Initialization vulnerability in the local server component, allowing a local attacker to read the contents of the memory space...

PT-2022-21096 · Pimcore · Pimcore

Name of the Vulnerable Software and Affected Versions: pimcore/pimcore versions prior to 10.5.6 Description: The issue is related to stored Cross-site Scripting XSS in the pimcore/pimcore GitHub repository. This occurs when an attacker injects a payload, for example, when adding properties for a...

PT-2022-16819 · Ezviz · Ezviz Cs-Db1C-A0-1E2W2Fr +4

Name of the Vulnerable Software and Affected Versions: EZVIZ CS-CV248 versions prior to 5.2.3 build 220725 EZVIZ CS-C6N-A0-1C2WFR versions prior to 5.3.0 build 220428 EZVIZ CS-DB1C-A0-1E2W2FR versions prior to 5.3.0 build 220802 EZVIZ CS-C6N-B0-1G2WF versions prior to 5.3.0 build 220712 EZVIZ...

Cisco Network Convergence System 4000 Series TL1 Denial of Service Vulnerability

A vulnerability in the TL1 function of Cisco Network Convergence System NCS 4000 Series could allow an authenticated, local attacker to cause a memory leak in the TL1 process. This vulnerability is due to TL1 not freeing memory under some conditions. An attacker could exploit this vulnerability b...

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Digital Business Automation Workflow family products (CVE-2018-1902)

Summary WebSphere Application Server is shipped as a component of IBM Business Automation Workflow, IBM Business Process Manager, WebSphere Enterprise Service Bus, and WebSphere Lombardi Edition. WebSphere Application Server Liberty is shipped as a component of the optional BPM component Process...

PT-2022-5097 · Cisco · Cisco Ios Xr

Name of the Vulnerable Software and Affected Versions: Cisco IOS XR Software affected versions not specified Description: A vulnerability in the Broadband Network Gateway PPP over Ethernet PPPoE feature of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause the PPPoE...

PT-2022-5040 · Adobe · Bridge

Name of the Vulnerable Software and Affected Versions: Adobe Bridge versions 12.0.2 and earlier Adobe Bridge versions 11.1.3 and earlier Description: The issue is related to a Heap-based Buffer Overflow that could result in arbitrary code execution in the context of the current user. Exploitation...