PT-2022-7059 · Adobe · Photoshop

Name of the Vulnerable Software and Affected Versions: Adobe Photoshop versions 22.5.6 and earlier Adobe Photoshop versions 23.2.2 and earlier Description: The issue is related to an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an...

WordPress Popup Maker plugin <= 1.16.4 - Stored Cross-Site Scripting (XSS) vulnerability

Stored Cross-Site Scripting XSS vulnerability discovered by Roel van Beurden in WordPress Popup Maker plugin versions = 1.16.4. Solution Update the WordPress Popup Maker plugin to the latest available version at least 1.16.5...

KLA20183 Multiple vulnerabilities in Git for Windows

Multiple vulnerabilities were found in Git for Windows. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions. Original advisories Git security vulnerability announced Related products Git-for-Windows CVE list CVE-2022-24767 unknown CVE-2022-247...

PT-2022-18342 · Inhand Networks · Inrouter 900

Name of the Vulnerable Software and Affected Versions: InHand Networks InRouter 900 Industrial 4G Router versions prior to v1.0.0.r11700 Description: A remote code execution issue was discovered in the config ovpn component. This issue can be triggered by a crafted packet, allowing for potential...

OpenEMR <= 6.0.0.4 Multiple Vulnerabilities

OpenEMR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:open-emr:openemr"; ifdescription...

PT-2022-10154 · Unknown · Mdt Autosave

Name of the Vulnerable Software and Affected Versions: MDT AutoSave versions prior to v6.02.06 Description: An issue exists where an attacker could leverage an API to pass a malicious file, manipulating the process creation command line and potentially running a command line argument. This could...

Amazon Corretto Java 16.x < 16.0.1.9.1 Multiple Vulnerabilities

The version of Amazon Corretto installed on the remote host is prior to 16 16.0.1.9.1. It is, therefore, affected by multiple vulnerabilities as referenced in the corretto-jdk16-2021-Apr-20 advisory. - core-libs/java.io CVE-2021-2161 - security-libs/java.security CVE-2021-2163 Note that Nessus ha...

Amazon Corretto Java 8.x < 8.275.01.1 Vulnerability

The version of Amazon Corretto installed on the remote host is prior to 8 8.275.01.1. It is, therefore, affected by a vulnerability as referenced in the corretto-8-2020-Nov-04 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported...

Amazon Corretto Java 11.x < 11.0.9.11.2 Vulnerability

The version of Amazon Corretto installed on the remote host is prior to 11 11.0.9.11.2. It is, therefore, affected by a vulnerability as referenced in the corretto-11-2020-Oct-22 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reporte...

Amazon Corretto Java 8.x < 8.282.08.1 Vulnerability

The version of Amazon Corretto installed on the remote host is prior to 8 8.282.08.1. It is, therefore, affected by a vulnerability as referenced in the corretto-8-2021-Jan-19 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported...

Amazon Corretto Java 11.x < 11.0.6.10.1-2 Vulnerability

The version of Amazon Corretto installed on the remote host is prior to 11 11.0.6.10.1-2. It is, therefore, affected by a vulnerability as referenced in the corretto-11-2020-Jan-23 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's...

Amazon Corretto Java 16.x < 16.0.2.7.1 Multiple Vulnerabilities

The version of Amazon Corretto installed on the remote host is prior to 16 16.0.2.7.1. It is, therefore, affected by multiple vulnerabilities as referenced in the corretto-jdk16-2021-Jul-20 advisory. - core-libs/java.net CVE-2021-2341 - security-libs/java.security CVE-2021-2369 - hotspot/compiler...

IdeaRE RefTree Path Traversal Vulnerability

=============================================================================== title: IdeaRE RefTree Download Path Traversal product: IdeaRE RefTree =============================================================================== EXECUTIVE SUMMARY RefTree is a web application made for managing...

OpenEMR <= 6.0.0 Multiple Vulnerabilities

OpenEMR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:open-emr:openemr"; ifdescription...

GitLab 8.8.x - 10.1.5, 10.2.x - 10.2.5, 10.3.x - 10.3.3 Multiple Vulnerabilities

GitLab is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:gitlab:gitlab"; if description...

GitLab 11.1.0, 11.1.1 DoS Vulnerability

GitLab is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:gitlab:gitlab"; if...

PT-2022-18711 · Gnu +2 · Gnu Gcc +2

Name of the Vulnerable Software and Affected Versions: GNU GCC version 11.2 Description: The issue in libiberty/rust-demangle.c allows stack consumption in demangle const. This can be demonstrated using nm-new. Recommendations: For GNU GCC version 11.2, update to a newer version that contains a f...

GitLab 12.10.x - 14.6.4, 14.7.x - 14.7.3, 14.8.x - 14.8.1 Multiple Vulnerabilities

GitLab is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:gitlab:gitlab"; if description...

PT-2022-16872 · Unknown · Grpc Swift

Name of the Vulnerable Software and Affected Versions: grpc-swift versions prior to 1.7.2 Description: The issue is a denial of service attack via a reachable assertion, caused by incorrect logic when handling GOAWAY frames. This attack requires minimal resources to construct and send the require...

GitLab 11.2.x - 11.2.6, 11.3.x - 11.3.7, 11.4.x - 11.4.2 Multiple Vulnerabilities

GitLab is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:gitlab:gitlab"; if description...