CVE-2022-35724

It is possible to provide data to be read that leads the reader to loop in cycles endlessly, consuming CPU. This issue affects Rust applications using Apache Avro Rust SDK prior to 0.14.0 previously known as avro-rs. Users should update to apache-avro version 0.14.0 which addresses this issue...

Design/Logic Flaw

It is possible to provide data to be read that leads the reader to loop in cycles endlessly, consuming CPU. This issue affects Rust applications using Apache Avro Rust SDK prior to 0.14.0 previously known as avro-rs. Users should update to apache-avro version 0.14.0 which addresses this issue...

CVE-2022-36125 Integer overflow when reading corrupted .avro file in Avro Rust SDK

It is possible to crash panic an application by providing a corrupted data to be read. This issue affects Rust applications using Apache Avro Rust SDK prior to 0.14.0 previously known as avro-rs. Users should update to apache-avro version 0.14.0 which addresses this issue...

PT-2022-4383 · Adobe · Acrobat Reader

Name of the Vulnerable Software and Affected Versions: Adobe Acrobat Reader versions 22.001.20169 and earlier Adobe Acrobat Reader versions 20.005.30362 and earlier Adobe Acrobat Reader versions 17.012.30249 and earlier Description: The issue is related to an out-of-bounds read vulnerability that...

PT-2022-20181 · Tibco Software · Tibco Ftl

Name of the Vulnerable Software and Affected Versions: TIBCO FTL - Community Edition versions 6.0.0 through 6.8.0 TIBCO FTL - Developer Edition versions 6.0.1 through 6.8.0 TIBCO FTL - Enterprise Edition versions 6.0.0 through 6.7.3 TIBCO FTL - Enterprise Edition version 6.8.0 Description: The...

PT-2022-16297 · WordPress · Crowdsignal Dashboard

Name of the Vulnerable Software and Affected Versions: Crowdsignal Dashboard WordPress plugin versions prior to 3.0.8 Description: The issue is related to a Reflected Cross-Site Scripting problem. It occurs because a parameter is not properly sanitised and escaped before being outputted back in t...

PT-2022-16462 · WordPress · Mtouch-Quiz

Name of the Vulnerable Software and Affected Versions: mTouch Quiz WordPress plugin versions 3.1.3 and earlier Description: The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks when the unfiltered html capability is disallowed, for example in a...

PT-2022-3996 · Exim +4 · Exim +4

Name of the Vulnerable Software and Affected Versions: Exim versions prior to 4.95 Description: The issue is related to a heap-based buffer overflow in the host name lookup function in host.c when sender host name is set. This can potentially allow a remote attacker to impact the confidentiality,...

PT-2022-21848 · Unknown · Desktopsystemui

Name of the Vulnerable Software and Affected Versions: DesktopSystemUI versions prior to SMR Aug-2022 Release 1 Description: The issue is related to improper access control, allowing attackers to enable and disable arbitrary components. Recommendations: For versions prior to SMR Aug-2022 Release ...

PT-2022-4130 · F5 · F5 Big-Ip +1

Name of the Vulnerable Software and Affected Versions: F5 BIG-IP versions 13.1.x F5 BIG-IP versions 14.1.x through 14.1.5.0 F5 BIG-IP versions 15.1.x through 15.1.6.0 F5 BIG-IP versions 16.1.x through 16.1.3.0 F5 BIG-IP versions 17.0.x through 17.0.0.0 F5 BIG-IQ versions 7.x F5 BIG-IQ versions 8....

PT-2022-4914 · Dell · Dell Powerprotect Cyber Recovery

Name of the Vulnerable Software and Affected Versions: Dell PowerProtect Cyber Recovery versions prior to 19.11.0.2 Description: The issue is related to an authentication bypass vulnerability. A remote unauthenticated attacker may potentially access and interact with the docker registry API,...

PT-2022-23027 · Flarum +2 · Flarum +2

Name of the Vulnerable Software and Affected Versions: fof/byobu versions prior to 1.1.7 Description: The issue concerns the fof/byobu private discussions extension for Flarum forum, where affected versions do not respect private discussion disablement by users. This means users who have chosen t...

Fedora: Security Advisory for golang-entgo-ent (FEDORA-2022-5ef0bd9a27)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2022-22932 · Unknown · Velociraptor

Name of the Vulnerable Software and Affected Versions: Velociraptor versions prior to 0.6.5-2 Description: The issue arises from a bug in the communication handling between the client and server, allowing a registered client to send messages claiming to come from another client ID. Additionally, ...

PT-2022-23745 · Veritas · Veritas Netbackup

Name of the Vulnerable Software and Affected Versions: Veritas NetBackup versions 8.1.x through 8.1.2 Veritas NetBackup version 8.2 Veritas NetBackup versions 8.3.x through 8.3.0.2 Veritas NetBackup versions 9.x through 9.0.0.1 Veritas NetBackup versions 9.1.x through 9.1.0.1 Description: An issu...

PT-2022-23733 · Veritas · Veritas Netbackup

Name of the Vulnerable Software and Affected Versions: Veritas NetBackup versions 8.1.x through 8.1.2 Veritas NetBackup version 8.2 Veritas NetBackup versions 8.3.x through 8.3.0.2 Veritas NetBackup versions 9.x through 9.0.0.1 Veritas NetBackup versions 9.1.x through 9.1.0.1 Description: An issu...

PT-2022-7842 · WordPress · Mb.Miniaudioplayer

Name of the Vulnerable Software and Affected Versions: WordPress Plugin mb.miniAudioPlayer-an HTML5 audio player for your mp3 files version 1.7.6 WordPress Plugin mb.miniAudioPlayer-an HTML5 audio player for your mp3 files versions prior to 1.7.6 Description: The WordPress Plugin...

PT-2022-5004 · Hitachi Energy · Hitachi Energy Msm

Name of the Vulnerable Software and Affected Versions: Hitachi Energy MSM versions V2.2 and prior Description: A vulnerability exists in the HTTP web interface where it does not validate data in an HTTP header, leading to a possible HTTP response splitting. This could allow an attacker to channel...

PT-2022-21469 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.5 Description: A logic issue was addressed with improved checks, allowing an app to potentially bypass Privacy preferences. Recommendations: For versions prior to 12.5, update to macOS Monterey 12.5 to resolve the...

PT-2022-21484 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to Security Update 2022-005 Catalina macOS Big Sur versions prior to 11.6.8 macOS Monterey versions prior to 12.5 Description: The issue allows an app to potentially overwrite arbitrary files due to inadequate file...