PT-2022-25066 · Samsung · Samsung Account

Name of the Vulnerable Software and Affected Versions: Samsung Account versions prior to 13.5.0 Description: The issue allows attackers to unauthorized logout due to a sensitive log information leakage. Recommendations: For versions prior to 13.5.0, update to version 13.5.0 or later to resolve th...

PT-2022-21891 · Rdiffweb · Rdiffweb

Name of the Vulnerable Software and Affected Versions: rdiffweb versions prior to 2.4.10 Description: The issue is related to Path Traversal in the GitHub repository ikus060/rdiffweb. Recommendations: For versions prior to 2.4.10, update to version 2.4.10 to resolve the issue...

CVE-2022-39273 Default OAuth Authorization Server secret in FlyteAdmin

FlyteAdmin is the control plane for the data processing platform Flyte. Users who enable the default Flyte’s authorization server without changing the default clientid hashes will be exposed to the public internet. In an effort to make enabling authentication easier for Flyte administrators, the...

PT-2022-25856 · Nasm +1 · Nasm +1

Name of the Vulnerable Software and Affected Versions: nasm version 2.16 Description: A stack overflow was discovered in the Ndisasm component of nasm. Recommendations: For version 2.16, update to a newer version that contains a fix for this issue...

PT-2022-20662 · WordPress · Donation Thermometer

Name of the Vulnerable Software and Affected Versions: Donation Thermometer WordPress plugin versions prior to 2.1.3 Description: The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks. This can occur even when the unfiltered html capability is...

PT-2022-34621 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.9 Description: A potential issue in the Linux Kernel's wifi mt76 mt7921e module may cause a crash during chip reset failure. The actual impact and attack plausibility have not yet been proven...

PT-2022-34608 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.9 Description: A memory leak issue was discovered when using the debugfs lookup function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prio...

PT-2022-34659 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.143 Description: A potential issue in the i40e module may cause a kernel crash during module removal. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2022-34584 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.10 Description: The issue is related to a use-after-free in the adev release function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior t...

PT-2022-34709 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.9.329 Description: A potential security issue has been identified in the Linux Kernel, specifically in the cc2520 tx function. The actual impact and attack plausibility have not yet been proven...

PT-2022-34665 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v4.8 through v5.10.142 Description: A use-after-free issue was discovered. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions v4.8 through v5.10.142, update to...

PT-2022-34701 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.293 Description: The issue concerns an out-of-bounds read when setting HMAC data in the IPv6 segment routing SR functionality. This problem was introduced in version v4.10 and is fixed in Linux Kernel...

PT-2022-34588 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.9 Description: The issue is related to a potential left shift overflow in swiotlb. The actual impact and attack plausibility have not yet been proven. It was introduced in version v5.12 and fixed in Linux...

PT-2022-34713 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.9.328 Description: The issue is related to an out of bounds access in the snd emu10k1 pcm channel alloc function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2022-34636 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.68 Description: The issue is related to the netfilter nf tables, where the hook list is not properly cleaned up when offload flags check fails. This is an automated ID intended to aid in discovery of...

PT-2022-34624 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.70 Description: The issue is related to an off-by-one error in the unflatten dt nodes function. This error was introduced in version v4.7 and fixed in version v5.15.70. The actual impact and attack...

PT-2022-34619 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.9 Description: The issue is related to a use-after-free in the efi capsule write function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions pri...

PT-2022-34632 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.68 Description: A potential issue in the i40e module may cause a kernel crash during module removal. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2022-34678 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.213 Description: A use-after-free warning was identified in the mpt3sas scsi driver. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2022-34638 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.15.62 through v5.15.67 Description: The issue is related to a compiler warning in the tee shm register function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...