Cisco Identity Services Engine Unauthorized File Access Vulnerability

A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to list, download, and delete files on an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker could explo...

Cisco Meraki MX and Z3 Teleworker Gateway VPN Denial of Service Vulnerability

A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z3 Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to insufficient validation of...

Stack-based buffer overflow vulnerability in Yokogawa Test & Measurement WTViewerE

Overview WTViewerE provided by Yokogawa Test & Measurement Corporation contains a stack-based buffer overflow vulnerability CWE-121. Michael Heinzl reported this vulnerability to JPCERT/CC. JPCERT/CC coordinated with the developer. Impact Processing a long file name may cause the product to crash...

OPENSUSE-SU-2022:10154-1 Security update for pngcheck

This update for pngcheck fixes the following issues: pngcheck was updated to 3.0.3: Version 3.0.1: fixed a crash bug and probable vulnerability in large MNG LOOP chunks Version 3.0.2: fixed a divide-by-zero crash bug and probable vulnerability in interlaced images with extra compressed data beyon...

OPENSUSE-SU-2022:10153-1 Security update for enlightenment

This update for enlightenment fixes the following issues: Update to 0.25.4 Bugfix release Fix shape handling in various cases that affected apps with shaped input Fix procstats popup and dangling icon for fullscreen windows Fix a vianishing pointer in some cases Workaround Qt issue where it does...

PT-2022-26908 · Jenkins · Jenkins +1

Name of the Vulnerable Software and Affected Versions: Jenkins Compuware Xpediter Code Coverage Plugin versions 1.0.7 and earlier Jenkins versions 2.318 and earlier, LTS 2.303.2 and earlier Description: The issue allows attackers able to control agent processes to obtain the values of Java system...

PT-2022-6795 · Unknown +2 · Openimageio +2

Name of the Vulnerable Software and Affected Versions: OpenImageIO versions prior to v2.3.20 OpenImageIO master-branch-9aeece7a and v2.3.19.0 Description: A heap out-of-bounds read issue exists in the RLA format parser of OpenImageIO, specifically in the handling of run-length encoded byte spans...

PT-2022-26030 · F5 · F5 Big-Ip +1

Name of the Vulnerable Software and Affected Versions: F5 BIG-IP versions 13.1.x through 16.1.2 F5 BIG-IP versions 14.1.x through 14.1.4 F5 BIG-IP versions 15.1.x through 15.1.6 F5 BIG-IQ versions 7.x through 8.1.0 Description: When an SSL key is imported on a BIG-IP or BIG-IQ system, undisclosed...

PT-2022-26902 · Jenkins · Jenkins Katalon Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Katalon Plugin versions 1.0.32 and earlier Description: The issue allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturin...

SUSE-SU-2022:3635-1 Security update for python-waitress

This update for python-waitress fixes the following issues: - CVE-2022-24761: Fixed a bug to avoid inconsistent interpretation of HTTP requests leading to request smuggling. bsc1197255...

Exploit for Incorrect Default Permissions in Avira Avira_Security

CVE-2022-3368 PoC for arbitrary file move vulnerability in So...

PT-2022-14995 · Oracle · Oracle Graalvm Enterprise Edition

Name of the Vulnerable Software and Affected Versions: Oracle GraalVM Enterprise Edition versions 20.3.7, 21.3.3, 22.2.0 Description: The issue allows an unauthenticated attacker with network access via multiple protocols to compromise Oracle GraalVM Enterprise Edition. Successful attacks can...

PT-2022-14993 · Oracle · Jd Edwards Enterpriseone Tools

Name of the Vulnerable Software and Affected Versions: JD Edwards EnterpriseOne Tools versions 9.2.6.4 and prior Description: The issue allows an unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks require human interaction from a...

PT-2022-6036 · Advantech · Advantech R-Seenet

Name of the Vulnerable Software and Affected Versions: Advantech R-SeeNet versions 2.4.17 and prior Description: The issue is related to a stack-based buffer overflow in Advantech R-SeeNet. This can be exploited by an unauthorized attacker to remotely overflow the stack buffer, enabling remote co...

OPENSUSE-SU-2022:0134-1 Security update for python-numpy

This update for python-numpy fixes the following issues: - CVE-2021-33430: Fixed buffer overflow that could lead to DoS in PyArrayNewFromDescrint function of ctors.c bsc1193913. - CVE-2021-41496: Fixed buffer overflow that could lead to DoS in arrayfrompyobj function of fortranobject.c bsc1193907...

PT-2022-20227 · Gitlab · Gitlab

Name of the Vulnerable Software and Affected Versions: GitLab versions 10.0 through 15.2.5 GitLab versions 15.3 through 15.3.4 GitLab versions 15.4 through 15.4.1 Description: An issue in GitLab allows an unauthorized user to create issues in a project. Recommendations: For versions 10.0 through...

PT-2022-21570 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab EE versions 14.9 through 15.2.4 GitLab EE versions 15.3 through 15.3.3 GitLab EE versions 15.4 through 15.4.0 Description: The issue concerns the serialization of sensitive data in GitLab EE, which can lead to the leakage of sensitive...

PT-2022-21082 · WordPress · Passster Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: Passster WordPress plugin version 3.5.5.5.2 and earlier Description: The issue arises from the storage of passwords inside a cookie named "passster" using a base64 encoding method, which is relatively easy to decode. This poses a significant...

PT-2022-20060 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions prior to 15.1.6 GitLab CE/EE versions 15.2 through 15.2.3 GitLab CE/EE versions 15.3 through 15.3.1 Description: An issue has been discovered in GitLab CE/EE that may allow an attacker to guess a user's password by brute...

PT-2022-21470 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions prior to 15.2.5 GitLab CE/EE versions 15.3 prior to 15.3.4 GitLab CE/EE versions 15.4 prior to 15.4.1 Description: An unhandled exception in job log parsing allows an attacker to prevent access to job logs...