PT-2022-34620 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.19.2 through v5.19.8 Description: A potential off-by-one overflow issue was identified in the il4965 rs fill link cmd function. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

PT-2022-34655 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.143 Description: The issue is related to a potential left shift overflow in swiotlb. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2022-34690 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.258 Description: A potential issue in the i40e module may cause a kernel crash during module removal. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2022-34657 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.143 Description: A potential security issue has been identified in the Linux Kernel, related to a nested dead lock as part of the ODP flow. The actual impact and attack plausibility have not yet been prove...

PT-2022-34605 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.9 Description: The issue concerns a potential security vulnerability in the Linux Kernel. It is related to the regmap: spi, where space for register address/padding is reserved. The actual impact and attac...

PT-2022-34682 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.213 Description: The issue is related to an out-of-bounds bug in the snd usb parse audio interface function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2022-34669 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.143 Description: The issue is related to the drm/radeon component, where a force flush is added to delay work. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2022-34675 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.213 Description: The issue concerns an out-of-bounds read when setting HMAC data in the IPv6 segment routing SR functionality. The actual impact and attack plausibility have not yet been proven...

PT-2022-5791 · Realvnc +1 · Realvnc Viewer +2

Name of the Vulnerable Software and Affected Versions: RealVNC VNC Server versions prior to 6.11.0 RealVNC VNC Viewer versions prior to 6.22.826 on Windows Description: The issue is related to insecure privilege management in RealVNC, allowing an attacker to escalate their privileges by exploitin...

CVE-2022-39246 matrix-android-sdk2 vulnerable to impersonation via forwarded Megolm sessions

matrix-android-sdk2 is the Matrix SDK for Android. Prior to version 1.5.1, an attacker cooperating with a malicious homeserver can construct messages appearing to have come from another person. Such messages will be marked with a grey shield on some platforms, but this may be missing in others...

SUSE-SU-2022:3425-1 Security update for grafana

This update for grafana fixes the following issues: Updated to version 7.5.12: - CVE-2021-43813: Fixed markdown path traversal bsc1193688. - CVE-2021-39226: Fixed Snapshot authentication bypass bsc1191454...

PT-2022-25277 · Ec Cube · Ec-Cube

Name of the Vulnerable Software and Affected Versions: EC-CUBE versions 3.0.0 through 3.0.18-p4 EC-CUBE versions 4.0.0 through 4.1.2 Description: A directory traversal issue allows a remote authenticated attacker with administrative privileges to obtain the product's directory structure...

PT-2022-5875 · D Link · D-Link Dnr-322L

Name of the Vulnerable Software and Affected Versions: D-Link DNR-322L versions 2.60B15 and earlier Description: The issue is related to a data integrity failure in the 'Backup Config' feature, allowing an authenticated attacker to execute OS level commands on the device. This can be exploited by...

PT-2022-24850

Name of the Vulnerable Software and Affected Versions mailcow versions prior to 2022-09 Description A vulnerability in mailcow allows an attacker to craft a custom Swagger API template to spoof Authorize links, potentially redirecting a victim to an attacker-controlled place to steal Swagger...

PT-2022-20233 · WordPress · Wordlift

Name of the Vulnerable Software and Affected Versions: WordLift WordPress plugin versions prior to 3.37.2 Description: The issue allows high privilege users, such as admins, to perform cross-Site Scripting attacks. This is possible because the plugin does not properly sanitise and escape its...

PT-2022-21156 · Unknown · Rocket.Chat

Name of the Vulnerable Software and Affected Versions: Rocket.Chat versions prior to 4.6.4 Description: A cleartext storage of sensitive information exists due to an Oauth token being leaked in plaintext in Rocket.Chat logs. Recommendations: For versions prior to 4.6.4, update to version 4.6.4 or...

PT-2022-23934 · WordPress · Blossom Recipe Maker

Name of the Vulnerable Software and Affected Versions: Blossom Recipe Maker plugin versions 1.0.7 and earlier Description: The issue concerns multiple authenticated Stored Cross-Site Scripting XSS vulnerabilities. These vulnerabilities can be exploited by contributors or users with higher...

PT-2022-21433 · Rdiffweb · Rdiffweb

Name of the Vulnerable Software and Affected Versions: rdiffweb versions prior to 2.4.6 Description: The issue is related to Cross-Site Request Forgery CSRF in the repository settings. A malicious user can change the settings of a repository by sending a URL to the victim. Recommendations: For...

CVE-2022-2265 Path traversal in Identity and Directory Management System

The Identity and Directory Management System developed by Çekino Bilgi Teknolojileri before version 2.1.25 has an unauthenticated Path traversal vulnerability. This has been fixed in the version 2.1.25...

SUSE-SU-2022:3326-1 Security update for go1.19

This update for go1.19 fixes the following issues: Update to go version 1.19.1 bsc1200441: - CVE-2022-27664: Fixed DoS in net/http caused by mishandled server errors after sending GOAWAY bsc1203185. - CVE-2022-32190: Fixed missing stripping of relative path components in net/url JoinPath bsc12031...