HPESBNW04383 rev.1 - Hewlett Packard Enterprise OfficeConnect 1820, 1850, and 1920S Network switches, Remote Authentication Bypass Vulnerability

Potential Security Impact: Remote: Authentication Bypass SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE OfficeConnect 1820 8G Switch J9979A - Prior to PT.02.14 HPE OfficeConnect 1820 8G PoE+ 65W Switch J9982A - Prior to PT.02.14 HPE OfficeConnect 1820 24G Switch J9980A - Prio...

PT-2022-35083 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: A refcount leak bug was found in the pl353 smc probe function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to v6.0.3,...

PT-2022-6949 · Openldap2 · Openldap2

Name of the Vulnerable Software and Affected Versions: openldap2 versions prior to 2.6.3-404.1 Description: The issue is related to an Untrusted Search Path vulnerability in openldap2, which allows local attackers with control of the ldap user or group to change ownership of arbitrary directory...

postgresql:12 security update

postgresql 12.12-1 - Resolves: 2131177 - Update to version 12.12...

SUSE-SU-2022:3765-1 Security update for grafana

This update for grafana fixes the following issues: Updated to version 8.3.10 jscSLE-24565, jscSLE-23422, jscSLE-23439: - CVE-2022-31097: Fixed XSS vulnerability in the Unified Alerting bsc1201535. - CVE-2022-31107: Fixed OAuth account takeover vulnerability bsc1201539. - CVE-2022-21702: Fixed XS...

PT-2022-26904 · Jenkins · Credentials Plugin +2

Name of the Vulnerable Software and Affected Versions: Jenkins Katalon Plugin versions 1.0.32 and earlier Description: The issue concerns the storage of API keys in an unencrypted manner within job config.xml files on the Jenkins controller. These keys can be accessed by users with Extended Read...

PT-2022-26682 · Wolfssl +1 · Wolfssl +1

Name of the Vulnerable Software and Affected Versions: wolfSSL versions prior to 5.5.0 Description: An issue was discovered in wolfSSL that allows a fault injection attack on RAM via Rowhammer, leading to ECDSA key disclosure. Users performing signing operations with private ECC keys, such as in...

PT-2022-8040 · Paint.Net · Paint.Net

Name of the Vulnerable Software and Affected Versions: Paint.NET versions prior to 4.1.2 Description: The issue allows deserialization of untrusted data. Recommendations: For versions prior to 4.1.2, update to version 4.1.2 or later to resolve the issue...

PT-2022-34641 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.68 Description: A potential issue exists in the Linux Kernel, related to a dentry leak in update sched domain debugfs. The actual impact and attack plausibility have not yet been proven. Recommendations: F...

PT-2022-21434 · Unknown · Ikus060/Minarca

Name of the Vulnerable Software and Affected Versions: ikus060/minarca versions prior to 4.2.2 Description: The issue concerns weak password requirements in the GitHub repository ikus060/minarca. Recommendations: For versions prior to 4.2.2, update to version 4.2.2 or later to resolve the issue...

PT-2022-25744 · Jenkins · Jenkins Ns-Nd Integration Performance Publisher Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins NS-ND Integration Performance Publisher Plugin versions 4.8.0.134 and earlier Description: The issue results from the plugin not escaping configuration options of the Execute NetStorm/NetCloud Test build step, leading to a stored...

PT-2022-34169 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.137 Description: The issue concerns the netfilter nf tables component, where SET ID is not properly restricted from referring to another table. This could potentially lead to security vulnerabilities,...

PT-2022-33936 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.15 through v5.15.60 Description: A use-after-free bug was discovered in the smb2 tree disconnect function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2022-34464 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.292 Description: The issue is related to a potential security vulnerability in the Linux Kernel. It involves a check for NULL in the rose loopback neigh-loopback variable. The actual impact and attack...

PT-2022-34077 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.137 Description: A use-after-free crash issue was discovered in the dm sm register threshold callback function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linu...

PT-2022-34298 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v3.11 through v5.4.210 Description: A potential buffer overflow issue exists in the ni set mc special registers function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2022-33761 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.63 Description: A potential refcount leak was discovered in the ndisc router discovery function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versio...

PT-2022-33931 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 3.16 through 5.15.60 Description: The issue concerns the netfilter nf tables, where SET ID is allowed to refer to another table, potentially leading to security vulnerabilities. The actual impact and attack plausibility...

PT-2022-33480 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: A potential refcount leak issue exists in the rpmsg register device override function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2022-33425 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.4 Description: The issue is related to an error handling path in the meson mmc probe function. It was introduced in version v4.18 and fixed in Linux Kernel version v5.19.4. The actual impact and attack...