PT-2023-14444 · Avira · Avira Security For Windows

Name of the Vulnerable Software and Affected Versions: Avira Security for Windows versions prior to 1.1.78 Description: The issue is related to an unquoted service path in Avira Security for Windows, which allows attackers with local administrative privileges to cause a Denial of Service...

Fedora 35 : admesh (2022-07dd239d6c)

The remote Fedora 35 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-07dd239d6c advisory. Security fix for TALOS-2022-1594. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

PT-2022-25424 · Pfsense · Pfblockerng

Name of the Vulnerable Software and Affected Versions: pfSense pfBlockerNG versions through 2.1.4 27 Description: The issue allows remote attackers to execute arbitrary OS commands as root via the HTTP Host header. Recommendations: For pfSense pfBlockerNG versions through 2.1.4 27, update to a...

PT-2022-26498 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to a possible out of bounds write in the phNxpNciHal core initialized function of phNxpNciHal.cc due to a missing bounds check. This could lead to local escalation of privilege wit...

PT-2022-27838 · Siemens · Scalance X204Rna +1

Name of the Vulnerable Software and Affected Versions: SCALANCE X204RNA HSR versions prior to V3.2.7 SCALANCE X204RNA PRP versions prior to V3.2.7 SCALANCE X204RNA EEC HSR versions prior to V3.2.7 SCALANCE X204RNA EEC PRP versions prior to V3.2.7 SCALANCE X204RNA EEC PRP/HSR versions prior to...

PT-2022-26459 · Unknown · Api2Cart Bridge Connector

Name of the Vulnerable Software and Affected Versions: Api2Cart Bridge Connector plugin version 1.1.0 and earlier Description: The issue is related to an Arbitrary Code Execution vulnerability. Recommendations: For Api2Cart Bridge Connector plugin version 1.1.0 and earlier, update to a version...

PT-2022-27290 · Unknown · Chameleon Plugin

Name of the Vulnerable Software and Affected Versions: Chameleon plugin versions 1.4.3 and earlier Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability. This vulnerability requires authentication with admin or higher privileges. The estimated number of potentially...

PT-2022-35060 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue is related to some leaks in the probe function of the dwc3 core in the Linux Kernel's USB component. The actual impact and attack plausibility have not yet been proven...

CVE-2022-43968

Concrete CMS formerly concrete5 below 8.5.10 and between 9.0.0 and 9.1.2 is vulnerable to Reflected XSS in the dashboard icons due to un-sanitized output. Remediate by updating to Concrete CMS 9.1.3+ or 8.5.10+...

PT-2022-37582 · FFmpeg · Ffmpeg

Name of the Vulnerable Software and Affected Versions: ffmpeg versions prior to 4.3.5 Description: This issue concerns several security vulnerabilities and bugs in ffmpeg. The vulnerabilities were corrected upstream. Recommendations: For versions prior to 4.3.5, update to version 4.3.5 to resolve...

PT-2022-26457 · WordPress · All In One Seo Pro

Name of the Vulnerable Software and Affected Versions: All in One SEO Pro plugin versions = 4.2.5.1 Description: The issue is related to a Server Side Request Forgery SSRF vulnerability. This type of vulnerability allows an attacker to trick the server into making requests to unintended locations...

PT-2022-14640 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-10 through Android-13 Description: The issue is caused by a logic error in the code, specifically in the start of Threads.cpp, which allows for the possibility of recording audio during a phone call. This could lead t...

PT-2022-34650 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.68 Description: The issue is related to a use-after-free in efi capsule write. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2022-34255 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.211 Description: The issue concerns a stack-out-of-bound access in SPMI tracing functions. It was introduced in version v4.3 and fixed in Linux Kernel version v5.4.211. The actual impact and attack...

PT-2022-33781 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.63 Description: The issue is related to the bpf and involves not reinitializing the map value in prealloc lru pop. The actual impact and potential for attack have not been proven yet. Recommendations: For...

PT-2022-33508 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: The issue concerns the soundwire driver bind/unbind and callbacks. It was introduced in version v4.16 and fixed in Linux Kernel version v5.19.2. The actual impact and attack plausibility hav...

PT-2022-33233 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.19 through v5.19.7 Description: A use-after-free issue was discovered during the unregister process in the firmware loader. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linu...

PT-2022-5097 · Cisco · Cisco Ios Xr

Name of the Vulnerable Software and Affected Versions: Cisco IOS XR Software affected versions not specified Description: A vulnerability in the Broadband Network Gateway PPP over Ethernet PPPoE feature of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause the PPPoE...

PT-2022-22485 · Pngdec · Pngdec

Name of the Vulnerable Software and Affected Versions: PNGDec version prior to the version that includes commit 8abf6be Description: A stack overflow issue was discovered in PNGDec. The issue is related to the /linux/main.cpp file. Recommendations: For versions prior to the version that includes...

Design/Logic Flaw

It is possible to crash panic an application by providing a corrupted data to be read. This issue affects Rust applications using Apache Avro Rust SDK prior to 0.14.0 previously known as avro-rs. Users should update to apache-avro version 0.14.0 which addresses this issue...