PT-2022-36688 · Git +1 · Hunspell

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read error. The crash state indicates involvement of the AffixMgr functions, specifically suffix check,...

PT-2022-24517 · Unknown · Soundrecorder

Name of the Vulnerable Software and Affected Versions: soundrecorder affected versions not specified Description: The issue is related to a missing permission check in the soundrecorder service. This could potentially lead to elevation of privilege in the contacts service, and it does not require...

PT-2022-10610 · Unknown · Ansible-Runner

Name of the Vulnerable Software and Affected Versions: ansible-runner affected versions not specified Description: A race condition flaw was found, allowing an attacker to potentially access ansible-runner's private data dir by substituting their directory at the name of a temporary directory. Th...

PT-2022-3136 · Microsoft · Windows Installer +1

Name of the Vulnerable Software and Affected Versions: Windows Installer affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in the Windows Installer service, which is caused by insufficient access restrictions. This vulnerability can be...

PT-2022-4330 · Unknown +5 · Xen Hypervisor +5

Name of the Vulnerable Software and Affected Versions: Xen hypervisor affected versions not specified Description: The issue is caused by synchronization errors when using a shared resource in the gntalloc driver of the Xen hypervisor. Exploitation of this issue may allow an attacker to cause a...

PT-2022-10740 · Unknown · Basebmpsupportlib

Name of the Vulnerable Software and Affected Versions: BaseBmpSupportLib affected versions not specified Description: The issue is related to a Heap Overflow in BaseBmpSupportLib. No information is provided about the estimated number of potentially affected devices worldwide or real-world inciden...

PT-2022-14284 · Unknown · Ion Driver

Name of the Vulnerable Software and Affected Versions: ion driver affected versions not specified Description: The issue is related to an incorrect bounds check in the ion driver, which could lead to local information disclosure without requiring additional execution privileges. User interaction ...

PT-2022-1655 · Microsoft · Windows Hyper-V +1

Name of the Vulnerable Software and Affected Versions: Windows Hyper-V affected versions not specified Description: The vulnerability is related to incorrect code generation management in the Windows Hyper-V hardware virtualization system. It allows remote attackers to execute arbitrary code on t...

PT-2022-14260 · Unknown · Vow Driver

Name of the Vulnerable Software and Affected Versions: vow driver affected versions not specified Description: The issue is related to a possible memory corruption in the vow driver due to improper input validation. This could lead to local escalation of privilege, with System execution privilege...

PT-2021-23403 · Unknown · Livehelperchat

Name of the Vulnerable Software and Affected Versions: livehelperchat affected versions not specified Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This means that the software does not properly neutralize use...

PT-2021-22847 · Bookstack · Bookstack

Name of the Vulnerable Software and Affected Versions: bookstack affected versions not specified Description: The issue is related to Improper Access Control. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this...

PT-2021-22841 · Unknown +1 · Janus-Gateway +1

Name of the Vulnerable Software and Affected Versions: janus-gateway affected versions not specified Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This means that the software does not properly neutralize user...

PT-2022-9183 · Almalinux +3 · Almalinux +3

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: No detailed information is provided about the issue, except that it is referred to as 'Уязвимость CVE-2021-20325'. Recommendations: At the momen...

PT-2021-6953 · Microsoft · Windows Container Isolation Fs Filter Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Container Isolation FS Filter Driver affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows Container Isolation FS Filter Driver, which can be exploited to elevate...

PT-2021-19242 · Unknown · Centos Web Panel

Name of the Vulnerable Software and Affected Versions: CentOS Web Panel affected versions not specified Description: The unprivileged user portal part of CentOS Web Panel is affected by a Command Injection issue, which can lead to root Remote Code Execution. Recommendations: At the moment, there ...

PT-2021-5210 · Microsoft · Visual Studio Code

Name of the Vulnerable Software and Affected Versions: Visual Studio Code affected versions not specified Description: The issue is related to incorrect code generation management in the settings.json file of Microsoft Visual Studio Code, allowing an attacker to execute arbitrary code...

PT-2021-2292 · Microsoft · Azure Sphere

Name of the Vulnerable Software and Affected Versions: Azure Sphere affected versions not specified Description: The issue is related to incorrect code generation management in the Azure Sphere operating system. It may allow a remote attacker to execute arbitrary code. Recommendations: At the...

PT-2021-2284 · Microsoft · Windows Error Reporting +1

Name of the Vulnerable Software and Affected Versions: Windows Error Reporting affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows Error Reporting service of the Windows operating system. This can allow an attacker to elevate their...

PT-2021-2070 · Microsoft · Skype For Business Server

Name of the Vulnerable Software and Affected Versions: Skype for Business Server Microsoft Lync Server affected versions not specified Description: The issue is related to errors in the user interface's representation of information. It may allow a remote attacker to conduct spoofing attacks...

PT-2021-3555 · Unknown +5 · Imagemagick +5

Name of the Vulnerable Software and Affected Versions: ImageMagick affected versions not specified Description: A flaw was found in ImageMagick in coders/jp2.c, related to the absence of a check for division by zero. This issue could allow an attacker to trigger undefined behavior in the form of...