PT-2022-5170 · Oracle +7 · Mysql Server +6

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 5.7.39 and prior MySQL Server versions 8.0.30 and prior Description: The issue is related to insufficient input validation in the Server: Connection Handling component of MySQL Server. This allows a high-privileged...

PT-2022-20334 · Miniorange · Miniorange Discord Integration Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: miniOrange Discord Integration WordPress plugin versions prior to 2.1.6 Description: The issue concerns a lack of authorization and CSRF protection in certain AJAX actions of the plugin, allowing any logged-in user, such as a subscriber, to...

PT-2022-25990 · WordPress · Villatheme Ald - Aliexpress Dropshipping/Fulfillment For Woocommerce

Name of the Vulnerable Software and Affected Versions: Villatheme ALD - AliExpress Dropshipping and Fulfillment for WooCommerce premium plugin version 1.1.0 and earlier Description: The issue concerns sensitive data exposure. The estimated number of potentially affected devices worldwide is not...

PT-2022-26650 · Bentley · Bentley Microstation +1

Name of the Vulnerable Software and Affected Versions: Bentley MicroStation versions prior to 10.17.01.58 Bentley View versions prior to 10.17.01.19 Description: The issue concerns out-of-bounds read and stack overflow problems that occur when opening crafted SKP files. This could lead to...

PT-2022-5197 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 19.1R3-S9 Juniper Networks Junos OS 19.2 versions prior to 19.2R3-S6 Juniper Networks Junos OS 19.3 versions prior to 19.3R3-S7 Juniper Networks Junos OS 19.4 versions prior to 19.4R2-S7, 19.4R3-S9...

PT-2022-6421 · Adobe · Acrobat Reader

Name of the Vulnerable Software and Affected Versions: Adobe Acrobat Reader versions 22.002.20212 and earlier Adobe Acrobat Reader versions 20.005.30381 and earlier Description: The issue is related to an out-of-bounds read vulnerability in Adobe Acrobat and Reader, which could lead to disclosure...

Ubuntu: Security Advisory (USN-5668-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2022-5012 · Unknown · Warpinator

Name of the Vulnerable Software and Affected Versions: Warpinator versions prior to 1.2.15 Description: The issue is related to incorrect link resolution before accessing files, allowing access outside of an intended directory. This can be exploited by a remote attacker to gain unauthorized acces...

PT-2022-7526 · Libde265 +4 · Libde265 +4

Name of the Vulnerable Software and Affected Versions: libde265 versions prior to 1.0.11 Description: The issue is related to a heap-buffer-overflow in the mc chroma function within the motion.cc component of the libde265 video codec implementation. This allows attackers to cause a Denial of...

PT-2022-34844 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.146 Description: The issue is related to a null pointer dereference in the efx hard start xmit function. This problem was introduced in version v5.10 and is fixed in version v5.10.146. The actual impact an...

PT-2022-34740 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0 Description: The issue is related to a possible bogus match in the nf osf find function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior ...

PT-2022-34722 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0 Description: The issue arises when blk put queue is called even if gendisk allocation fails. This problem was introduced in version v6.0 and is fixed in the same version by a specific commit. Recommendation...

PT-2022-34798 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.12 Description: The issue is related to the block layer in the Linux Kernel, where the nomerges flags are not properly set in the blk cleanup queue function. The actual impact and attack plausibility of th...

PT-2022-34738 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0 Description: A memory leak issue was discovered in the qlt 24xx handle abts function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2022-34865 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.295 Description: A memory leak issue exists when a blob is malformed. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to v4.14.295, upda...

PT-2022-34749 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0 Description: The issue is related to the gpiolib, specifically with the cdev and lineevent state::irq. It was introduced in version v5.9 and fixed in version v6.0. The actual impact and attack plausibility...

PT-2022-34791 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.12 Description: A potential security issue exists due to a failure to return an error code when kmalloc fails. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2022-34739 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0 Description: A potential issue exists in the Linux Kernel, specifically in the mm/slab common component, where a possible double free of kmem cache could occur. The actual impact and attack plausibility hav...

PT-2022-25043 · Unknown · Perf-Mgr Driver

Name of the Vulnerable Software and Affected Versions: perf-mgr driver versions prior to SMR Oct-2022 Release 1 Description: A use after free issue in the perf-mgr driver allows an attacker to cause a memory access fault. Recommendations: For versions prior to SMR Oct-2022 Release 1, update to SM...

CVE-2022-41853

Those using java.sql.Statement or java.sql.PreparedStatement in hsqldb HyperSQL DataBase to process untrusted input may be vulnerable to a remote code execution attack. By default it is allowed to call any static method of any Java class in the classpath resulting in code execution. The issue can...