PT-2022-20759 · WordPress · Wp Custom Cursors

Name of the Vulnerable Software and Affected Versions: WP Custom Cursors WordPress plugin versions prior to 3.0.1 Description: The issue is related to the lack of a CSRF check when creating and editing cursors, which could allow attackers to perform actions via CSRF attacks on logged-in admins...

PT-2022-17422 · WordPress · Tutor Lms

Name of the Vulnerable Software and Affected Versions: Tutor LMS WordPress plugin versions prior to 2.0.10 Description: The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks. This can occur even when the unfiltered html capability is disallowed, for...

PT-2022-20779 · WordPress · Wp Custom Cursors

Name of the Vulnerable Software and Affected Versions: WP Custom Cursors WordPress plugin versions prior to 3.0.1 Description: The issue concerns a lack of CSRF check when deleting cursors, potentially allowing attackers to trick logged-in admins into deleting arbitrary cursors via a CSRF attack...

PT-2022-20768 · WordPress · Wp Custom Cursors

Name of the Vulnerable Software and Affected Versions: WP Custom Cursors WordPress plugin versions prior to 3.2 Description: The issue is related to a SQL injection that occurs due to improper sanitization and escaping of a parameter before it is used in a SQL statement. This can be exploited by...

PT-2022-26686 · Gitea +1 · Gitea +1

Name of the Vulnerable Software and Affected Versions: Gitea versions prior to 1.17.3 Description: The issue concerns the mishandling of arguments to git commands due to insufficient sanitization and escaping of refs in the git backend. This can lead to potential argument injection...

PT-2022-25462 · Apache +1 · Apache Shiro +1

Name of the Vulnerable Software and Affected Versions: Apache Shiro versions prior to 1.10.0 Description: The issue is related to an authentication bypass vulnerability in Apache Shiro when forwarding or including via RequestDispatcher. Recommendations: For versions prior to 1.10.0, update to...

PT-2022-25295 · Siemens · Siplus Hmi Ktp900 Basic +9

Name of the Vulnerable Software and Affected Versions: SIMATIC HMI Comfort Panels incl. SIPLUS variants versions prior to V17 Update 4 SIMATIC HMI KTP Mobile Panels versions prior to V17 Update 4 SIMATIC HMI KTP1200 Basic versions prior to V17 Update 5 SIMATIC HMI KTP400 Basic versions prior to V...

PT-2022-21089 · WordPress · Simple File List

Name of the Vulnerable Software and Affected Versions: Simple File List WordPress plugin versions prior to 4.4.12 Description: The issue concerns the lack of nonce checks in the Simple File List WordPress plugin, which could allow attackers to perform a CSRF attack. This attack could enable...

PT-2022-7255 · Libde265 +4 · Libde265 +4

Name of the Vulnerable Software and Affected Versions: Libde265 versions 1.0.8 Description: The issue is related to a heap-buffer-overflow vulnerability via the mc luma function in motion.cc, which allows attackers to cause a Denial of Service DoS via a crafted video file. This vulnerability is...

PT-2022-21086 · WordPress · Simple File List

Name of the Vulnerable Software and Affected Versions: Simple File List WordPress plugin versions prior to 4.4.12 Description: The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks, even when the unfiltered html capability is disallowed, for example...

PT-2022-7262 · Libde265 +3 · Libde265 +3

Name of the Vulnerable Software and Affected Versions: Libde265 version 1.0.8 Description: The issue is related to the ff hevc put hevc qpel h 3 v 3 sse function in the Libde265 video codec implementation, which can cause a buffer overflow in memory. This can be exploited by a remote attacker usi...

PT-2022-34867 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.295 Description: The issue is related to a potential security vulnerability in the Linux Kernel. It has been fixed in version v4.14.295. The problem occurs when kmalloc fails, and an error is not properly...

PT-2022-34752 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0 Description: The issue is related to a NULL pointer dereference when removing debugfs. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2022-34809 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.71 Description: A potential issue exists in the Linux Kernel related to a possible refcount leak in the tc new tfilter function. The actual impact and attack plausibility have not yet been proven...

PT-2022-34775 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.12 Description: The issue is related to the taprio component in the Linux Kernel, where offload may not be properly disabled when it was never enabled. The actual impact and attack plausibility have not ye...

PT-2022-34804 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.71 Description: The issue is related to a potential stack overflow in the mlxbf i2c smbus start transaction function. The actual impact and attack plausibility have not yet been proven. Recommendations: Fo...

PT-2022-34744 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0 Description: A refcount leak bug was discovered in the of xudma dev get function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to v6.0...

PT-2022-34863 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.260 Description: The issue is related to a potential security vulnerability in the Linux Kernel. It involves a fix to return an error number if the kmalloc function fails. The actual impact and attack...

PT-2022-34796 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.12 Description: A potential issue exists in the btrfs filesystem, which may cause a hang during unmount when stopping a space reclaim worker. The actual impact and attack plausibility have not yet been...

PT-2022-34832 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.71 Description: A potential issue exists in the btrfs filesystem, which may cause a hang during unmount when stopping a space reclaim worker. The actual impact and attack plausibility have not yet been...