12583 matches found
PT-2022-15878 · WordPress · Vr Calendar
Name of the Vulnerable Software and Affected Versions: VR Calendar WordPress plugin versions prior to 2.3.3 Description: The issue allows any user to execute arbitrary PHP functions on the site. This can lead to unauthorized access and potential code execution. Recommendations: For versions prior...
PT-2022-8644 · Zoho · Manageengine Analytics Plus
Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine Analytics Plus versions prior to 4350 Description: A Directory Traversal issue exists due to the ZDBQAREFSUBDIR parameter in the "/zropusermgmt" API endpoint. This allows remote attackers to potentially run arbitrary code...
Apache Avro Rust SDK corrupted data read can cause crash
It is possible to crash panic an application by providing a corrupted data to be read. This issue affects Rust applications using Apache Avro Rust SDK prior to 0.14.0 previously known as avro-rs. Users should update to apache-avro version 0.14.0 which addresses this issue...
Apache Avro Rust SDK's Reader could consume memory beyond allowed constraints
It is possible for a Reader to consume memory beyond the allowed constraints and thus lead to out of memory on the system. This issue affects Rust applications using Apache Avro Rust SDK prior to 0.14.0 previously known as avro-rs. Users should update to apache-avro version 0.14.0 which addresses...
PT-2022-19407 · Dell · Dell Wyse Management Suite
Name of the Vulnerable Software and Affected Versions: Dell Wyse Management Suite versions 3.6.1 and below Description: The issue allows a low privileged malicious user to potentially exploit it and obtain credentials. The attacker may use the exposed credentials to access the target device and...
PT-2022-15396 · Ibm · Ibm Workload Scheduler
Name of the Vulnerable Software and Affected Versions: IBM Workload Scheduler versions 9.4 through 9.5 Description: The issue allows a local user to overwrite key system files, which could cause the system to crash. Recommendations: For IBM Workload Scheduler versions 9.4 through 9.5, update to a...
PT-2022-21916 · Dell · Dell Wyse Management Suite
Name of the Vulnerable Software and Affected Versions: Dell Wyse Management Suite versions 3.6.1 and below Description: The issue allows an unauthenticated attacker to exploit a Session Fixation vulnerability by taking advantage of a user with multiple active sessions, potentially hijacking a...
PT-2022-4151 · Siemens · Teamcenter
Name of the Vulnerable Software and Affected Versions: Teamcenter versions prior to V12.4.0.15 Teamcenter versions prior to V13.0.0.10 Teamcenter versions prior to V13.1.0.10 Teamcenter versions prior to V13.2.0.9 Teamcenter versions prior to V13.3.0.5 Teamcenter versions prior to V14.0.0.2...
PT-2022-7018 · Microsoft +6 · Net 6.0 +7
Name of the Vulnerable Software and Affected Versions: .NET Core 3.1 versions 3.1.0 through 3.1.27 .NET 6.0 versions 6.0.0 through 6.0.7 Description: An information disclosure issue exists due to incorrect restriction of XML external entity references, potentially allowing a remote attacker to...
Intel® Connect M Android App Advisory
Summary: A potential security vulnerability in the Intel® Connect Mobile Connect M Android application may allow information disclosure. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2021-44470 Description: Incorrect default...
Intel® PROSet/Wireless WiFi and Killer™ WiFi Advisory
Summary: Potential security vulnerabilities in some Intel® PROSet/Wireless WiFi and Killer™ WiFi products may allow escalation of privilege, information disclosure or denial of service. Intel is releasing firmware and software updates to mitigate these potential vulnerabilities. Vulnerability...
Intel® DSA Advisory
Summary: A potential security vulnerability in the Intel® Driver & Support Assistant DSA software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-26017 Description: Improper access control in t...
Intel® RST Advisory
Summary: A potential security vulnerability in the Intel® Rapid Storage Technology RST software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2018-1285 Non-Intel issued Description: Improper...
PT-2022-4380 · Adobe · Acrobat Reader
Name of the Vulnerable Software and Affected Versions: Adobe Acrobat Reader versions 22.001.20169 and earlier Adobe Acrobat Reader versions 20.005.30362 and earlier Adobe Acrobat Reader versions 17.012.30249 and earlier Description: The issue is related to an out-of-bounds write vulnerability in...
Intel® VTune™ Profiler Advisory
Summary: A potential security vulnerability in the Intel® VTune™ Profiler software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-21807 Description: Uncontrolled search path elements in the...
Intel® Edge Insights for Industrial Advisory
Summary: Potential security vulnerabilities in the Intel® Edge Insights for Industrial software may allow escalation of privilege or information disclosure. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2022-22730 Description:...
Open AMT Cloud Toolkit Advisory
Summary: A potential security vulnerability in the Open AMT Cloud Toolkit software maintained by Intel® may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-25899 Description: Authentication bypass...
PT-2022-4391 · Adobe · Framemaker
Name of the Vulnerable Software and Affected Versions: Adobe FrameMaker versions 2019 Update 8 and earlier Adobe FrameMaker versions 2020 Update 4 and earlier Description: The issue is related to an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past th...
MGASA-2022-0275 Updated mingw-giflib packages fix security vulnerability
It was discovered that giflib 5.2.1 including mingw-giflib which has giflib 5.2.1 bundled contained a heap-buffer-overflow in function DumpScreen2RGB CVE-2022-28506...
