PT-2022-11547 · Mupdf +2 · Mupdf +2

Name of the Vulnerable Software and Affected Versions: Mupdf versions prior to 1.20.0-rc1 Description: A Floating point exception division-by-zero flaw was found in Mupdf for zero width pages in muraster.c. Recommendations: For versions prior to 1.20.0-rc1, update to Mupdf-1.20.0-rc1 or later to...

PT-2022-19205 · Gosecure · Gosecure Titan Inbox Detection & Response

Name of the Vulnerable Software and Affected Versions: GoSecure Titan Inbox Detection & Response IDR versions prior to 2022-04-05 Description: The issue allows for remote code execution due to key reuse. An attacker must craft and sign a serialized payload to exploit this. Recommendations: For...

PT-2022-8929 · Pngcheck +2 · Pngcheck +2

Name of the Vulnerable Software and Affected Versions: pngcheck version 2.4.0 Description: A global buffer overflow was discovered in the pngcheck function via a crafted png file. Recommendations: For pngcheck version 2.4.0, update to a version that includes a fix for the buffer overflow issue in...

PT-2022-23324 · Pukiwiki · Pukiwiki

Name of the Vulnerable Software and Affected Versions: PukiWiki versions 1.3.1 through 1.5.3 Description: A stored cross-site scripting issue allows a remote attacker to inject an arbitrary script via unspecified vectors. Recommendations: For PukiWiki versions 1.3.1 through 1.5.3, update to a...

KLA15726 Multiple vulnerabilities in Mozilla Firefox

Multiple vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. Memory safety vulnerability can be...

OpenWRT < 19.07.7 DoS Vulnerability

OpenWRT is prone to a denial of service DoS vulnerability. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; yo...

OpenWRT < 18.06.8, 19.x < 19.07.2 ppp Vulnerability

OpenWRT is prone to a buffer overflow vulnerability in ppp. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

WordPress Better Messages plugin <= 1.9.10.57 - Denial Of Service (DoS) vulnerability

Denial Of Service DoS vulnerability was discovered by Dhakal Ananda Patchstack Alliance in the WordPress Better Messages plugin versions = 1.9.10.57. Solution Update the WordPress BP Better Messages plugin to the latest available version at least 1.9.10.58...

PT-2022-21922 · Dell · Dell Powerscale Onefs

Name of the Vulnerable Software and Affected Versions: Dell PowerScale OneFS versions 9.0.0 up to and including 9.1.0.19 Dell PowerScale OneFS version 9.2.1.12 Dell PowerScale OneFS version 9.3.0.6 Dell PowerScale OneFS version 9.4.0.2 Description: The issue is related to an unprotected primary...

Jenkins < 1.482, < 1.466.2 LTS Multiple Vulnerabilities - Linux

Jenkins is prone to multiple vulnerabilities. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2022-35975 Improper object validation allows for arbitrary code execution in GitOps Tools Extension for VSCode

The GitOps Tools Extension for VSCode can make it easier to manage Flux objects. A specially crafted Flux object may allow for remote code execution in the machine running the extension, in the context of the user that is running VSCode. Users using the VSCode extension to manage clusters that ar...

PT-2022-15134 · Vmware +1 · Vmware +2

Name of the Vulnerable Software and Affected Versions: IntelR Ethernet 500 Series Controller drivers for VMWare versions prior to 1.11.4.0 IntelR Ethernet 700 Series Controller drivers for VMWare versions prior to 2.1.5.0 Description: The issue is related to insufficient control flow management i...

PT-2022-19652 · Cybozu · Cybozu Office

Name of the Vulnerable Software and Affected Versions: Cybozu Office versions 10.0.0 through 10.8.5 Description: A cross-site scripting issue allows a remote attacker to inject an arbitrary script via unspecified vectors. Recommendations: For Cybozu Office versions 10.0.0 through 10.8.5, update t...

PT-2022-23987 · Payara · Payara Micro +2

Name of the Vulnerable Software and Affected Versions: Payara versions through 5.2022.2 Description: The issue allows directory traversal without authentication, affecting Payara Server, Payara Micro, and Payara Server Embedded. Recommendations: For Payara versions through 5.2022.2, update to a...

PT-2022-22603 · Fusionpbx · Fusionpbx

Name of the Vulnerable Software and Affected Versions: FusionPBX version 5.0.1 Description: A command injection issue was found in FusionPBX via the /fax/fax send.php endpoint. This allows for potential command execution. Recommendations: For FusionPBX version 5.0.1, update to a version that...

PT-2022-14463 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to improper input validation in the Messaging component, allowing the attachment of private files to SMS messages. This could lead to local information disclosure without requiring...

KLA15718 RCE vulnerability in PostgreSQL

Remote code execution vulnerability was found in PostgreSQL. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories PostgreSQL: CVE-2022-2625 Related products PostgreSQL CVE list CVE-2022-2625 critical Solution Update to the latest version Download PostgreSQ...

PT-2022-19209 · Zoom · Zoom On-Premise Meeting Connector Mmr

Name of the Vulnerable Software and Affected Versions: Zoom On-Premise Meeting Connector MMR versions prior to 4.8.129.20220714 Description: The issue allows a malicious actor to join a meeting without appearing to other participants, admit themselves from the waiting room, become the host, and...

Apache Traffic Server (ATS) 8.0.0 <= 8.1.4 Improper Input Validation Vulnerability

Apache Traffic Server ATS is prone to an improper input validation vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

PT-2022-17498 · Apache · Apache Traffic Server

Name of the Vulnerable Software and Affected Versions: Apache Traffic Server versions 8.0.0 through 9.1.2 Description: The issue is related to an Improper Input Validation vulnerability in the HTTP/2 request validation of Apache Traffic Server. This allows an attacker to create smuggle or cache...