170 matches found
PT-2022-18889 · Unknown · Ydb Server
Name of the Vulnerable Software and Affected Versions: YDB server affected versions not specified Description: An out-of-bounds read was discovered in the YDB server, allowing an attacker to construct a query with an insert statement to read sensitive information from other memory locations or...
PT-2022-27760 · Siemens · Ruggedcom Rm1224 Lte(4G) Eu +151
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue concerns devices that store CLI user passwords encrypted in flash memory. Attackers with physical access to the device could potentially...
PT-2023-22486 · Unknown +4 · Llvm-Project +4
Name of the Vulnerable Software and Affected Versions: llvm-project affected versions not specified Description: A segmentation fault was discovered in the llvm-project via the component mlir::Block::getArgument. This issue affects the mlir::Block::getArgument component, which is part of the...
PT-2022-24718 · Unknown · Power Management Service
Name of the Vulnerable Software and Affected Versions: Power management service affected versions not specified Description: A missing permission check in the power management service could allow it to be set up without requiring additional execution privileges. Recommendations: At the moment,...
PT-2022-23907 · Unknown · Seccome Ehoney
Name of the Vulnerable Software and Affected Versions: seccome Ehoney affected versions not specified Description: A critical issue has been found in seccome Ehoney, affecting the processing of the file "/api/v1/attack". The manipulation of the AttackIP argument leads to SQL injection. This issue...
PT-2022-36688 · Git +1 · Hunspell
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read error. The crash state indicates involvement of the AffixMgr functions, specifically suffix check,...
PT-2022-24517 · Unknown · Soundrecorder
Name of the Vulnerable Software and Affected Versions: soundrecorder affected versions not specified Description: The issue is related to a missing permission check in the soundrecorder service. This could potentially lead to elevation of privilege in the contacts service, and it does not require...
PT-2022-10610 · Unknown · Ansible-Runner
Name of the Vulnerable Software and Affected Versions: ansible-runner affected versions not specified Description: A race condition flaw was found, allowing an attacker to potentially access ansible-runner's private data dir by substituting their directory at the name of a temporary directory. Th...
PT-2022-3136 · Microsoft · Windows Installer +1
Name of the Vulnerable Software and Affected Versions: Windows Installer affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in the Windows Installer service, which is caused by insufficient access restrictions. This vulnerability can be...
PT-2022-4330 · Unknown +5 · Xen Hypervisor +5
Name of the Vulnerable Software and Affected Versions: Xen hypervisor affected versions not specified Description: The issue is caused by synchronization errors when using a shared resource in the gntalloc driver of the Xen hypervisor. Exploitation of this issue may allow an attacker to cause a...
PT-2022-10740 · Unknown · Basebmpsupportlib
Name of the Vulnerable Software and Affected Versions: BaseBmpSupportLib affected versions not specified Description: The issue is related to a Heap Overflow in BaseBmpSupportLib. No information is provided about the estimated number of potentially affected devices worldwide or real-world inciden...
PT-2022-14284 · Unknown · Ion Driver
Name of the Vulnerable Software and Affected Versions: ion driver affected versions not specified Description: The issue is related to an incorrect bounds check in the ion driver, which could lead to local information disclosure without requiring additional execution privileges. User interaction ...
PT-2022-1655 · Microsoft · Windows Hyper-V +1
Name of the Vulnerable Software and Affected Versions: Windows Hyper-V affected versions not specified Description: The vulnerability is related to incorrect code generation management in the Windows Hyper-V hardware virtualization system. It allows remote attackers to execute arbitrary code on t...
PT-2022-14260 · Unknown · Vow Driver
Name of the Vulnerable Software and Affected Versions: vow driver affected versions not specified Description: The issue is related to a possible memory corruption in the vow driver due to improper input validation. This could lead to local escalation of privilege, with System execution privilege...
PT-2021-23403 · Unknown · Livehelperchat
Name of the Vulnerable Software and Affected Versions: livehelperchat affected versions not specified Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This means that the software does not properly neutralize use...
PT-2021-22847 · Bookstack · Bookstack
Name of the Vulnerable Software and Affected Versions: bookstack affected versions not specified Description: The issue is related to Improper Access Control. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this...
PT-2021-22841 · Unknown +1 · Janus-Gateway +1
Name of the Vulnerable Software and Affected Versions: janus-gateway affected versions not specified Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This means that the software does not properly neutralize user...
PT-2022-9183 · Almalinux +3 · Almalinux +3
Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: No detailed information is provided about the issue, except that it is referred to as 'Уязвимость CVE-2021-20325'. Recommendations: At the momen...
PT-2021-6953 · Microsoft · Windows Container Isolation Fs Filter Driver +1
Name of the Vulnerable Software and Affected Versions: Windows Container Isolation FS Filter Driver affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows Container Isolation FS Filter Driver, which can be exploited to elevate...
PT-2021-19242 · Unknown · Centos Web Panel
Name of the Vulnerable Software and Affected Versions: CentOS Web Panel affected versions not specified Description: The unprivileged user portal part of CentOS Web Panel is affected by a Command Injection issue, which can lead to root Remote Code Execution. Recommendations: At the moment, there ...