Azure File Sync Agent v15.0 Release – March 2022 (KB5003882)

Update for Azure File Sync agent version 15.0.0.0. For more details, see the associated Microsoft Knowledge Base article...

WordPress plugin Videos sync PDF file contains vulnerabilities

WordPress is a set of blogging platform developed using the PHP language. WordPress plugin Videos sync PDF version 1.7.4 and before there is a file inclusion vulnerability, the vulnerability stems from the plugin in the inclusion statement using the p parameter before failing to validate, an...

CVE-2022-1392

The Videos sync PDF WordPress plugin through 1.7.4 does not validate the p parameter before using it in an include statement, which could lead to Local File Inclusion issues...

CVE-2022-1392 Videos sync PDF <= 1.7.4 - Unauthenticated LFI

The Videos sync PDF WordPress plugin through 1.7.4 does not validate the p parameter before using it in an include statement, which could lead to Local File Inclusion issues...

CVE-2022-1392

The CVE-2022-1392 entry concerns the WordPress plugin Videos sync PDF, version = 1.7.5 or apply the vendor patch. The connected nuclei/WP exploit references indicate a PoC exists (e.g., WPEX template "Videos sync PDF

PT-2022-13852

Name of the Vulnerable Software and Affected Versions Videos sync PDF WordPress plugin versions 1.7.4 and earlier Description The issue arises from the plugin not validating the p parameter before using it in an include statement, potentially leading to Local File Inclusion issues. Recommendation...

CVE-2022-1392: Improper Limitation of a Pathname to a Restricted Directory

The Videos sync PDF WordPress plugin through 1.7.4 does not validate the p parameter before using it in an include statement, which could lead to Local File Inclusion issues...

WordPress plugin: Videos sync PDF path traversal vulnerability

WordPress is a set of blogging platform developed using the PHP language. WordPress plugin Videos sync PDF version 1.7.4 and before there is a file inclusion vulnerability, the vulnerability stems from the plugin in the inclusion statement using the p parameter before failing to validate, an...

PT-2022-29359

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.3 Description The issue is related to a null pointer dereference on hci sync conn complete evt. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2022-29347

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.3 Description The issue is related to the ath11k driver in the Linux Kernel, specifically with the mhi sync power up function. The actual impact and attack plausibility have not yet been proven...

PT-2022-29345

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.3 Description The issue is related to a missing pm runtime put sync in the drm/bridge component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2022-29592

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description The issue concerns a loop condition in the f2fs quota sync function. It was introduced in version v5.15 and fixed in version v5.17.2. The actual impact and attack plausibility have not yet bee...

PT-2022-29682

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.20 Description The issue is related to a missing pm runtime put sync in the drm/bridge component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel version...

PT-2022-29895

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.19 Description The issue is related to a loop condition in the f2fs quota sync function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior t...

PT-2022-30203

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description The issue is related to a loop condition in the f2fs quota sync function. It was introduced in version v5.15 and fixed in version v5.15.33. The actual impact and attack plausibility have not...

PT-2022-30287

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.111 Description The issue is related to the ath11k driver in the Linux Kernel, specifically with the mhi sync power up function. The actual impact and attack plausibility have not yet been proven...

PT-2022-30010

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.34 Description The issue is related to a missing pm runtime put sync in the drm/bridge component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel version...

PT-2022-29683

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.20 Description The issue is related to the ath11k driver in the Linux Kernel, specifically with the mhi sync power up function. The actual impact and attack plausibility have not yet been proven...

PT-2022-30554

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 5.4.148 through 5.4.188 Description The issue is related to a loop condition in the f2fs quota sync function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2022-30007

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.34 Description The issue is related to the ath11k driver in the Linux Kernel, specifically with the mhi sync power up function. The actual impact and attack plausibility have not yet been proven...