PT-2022-25815 · Kitty +4 · Kitty +4

Name of the Vulnerable Software and Affected Versions: Kitty versions prior to 0.26.2 Description: The issue is related to insufficient validation in the desktop notification escape sequence, which can lead to arbitrary code execution. This occurs when a user displays attacker-controlled content ...

PT-2022-25029 · Unknown · Cotonti Siena

Name of the Vulnerable Software and Affected Versions: Cotonti Siena version 0.9.20 Description: The issue allows admins to conduct stored XSS attacks via a forum post. Recommendations: For Cotonti Siena version 0.9.20, update to a version that fixes this issue, as using the current version may...

PT-2022-7694 · Drawio +1 · Drawio +1

Name of the Vulnerable Software and Affected Versions: drawio versions prior to 20.3.0 Description: The issue is related to the incorrect neutralization of special elements used in an OS command, which can allow a remote attacker to execute arbitrary commands. Recommendations: For versions prior ...

SUSE-SU-2022:3001-1 Security update for json-c

This update for json-c fixes the following issues: - CVE-2020-12762: Fixed an integer overflow that could lead to memory corruption via a large JSON file bsc1171479. Non-security fixes: - Updated to version 0.12.1 jscPED-1778...

Google Chrome Bug Lets Sites Silently Overwrite System Clipboard Content

A "major" security issue in the Google Chrome web browser, as well as Chromium-based alternatives, could allow malicious web pages to automatically overwrite clipboard content without requiring any user consent or interaction by simply visiting them. The clipboard poisoning attack is said to have...

PT-2022-22148 · Dell · Dell Powerscale Onefs

Name of the Vulnerable Software and Affected Versions: Dell PowerScale OneFS versions 9.0.0 up to and including 9.1.0.20 Dell PowerScale OneFS version 9.2.1.13 Dell PowerScale OneFS version 9.3.0.6 Dell PowerScale OneFS version 9.4.0.3 Description: The issue concerns the insertion of sensitive...

PT-2022-4593 · Weave · Weave Gitops Enterprise

Name of the Vulnerable Software and Affected Versions: Weave GitOps Enterprise versions prior to 0.9.0-rc.5 Description: The issue is related to a lack of input data sanitization, which can be exploited by a remote attacker to conduct a cross-site scripting XSS attack using a specially crafted...

WordPress Multiple Vulnerabilities (Aug 2022) - Linux

WordPress is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wordpress:wordpress"; ifdescripti...

PT-2022-17791 · Micro Focus · Micro Focus Arcsight Logger

Name of the Vulnerable Software and Affected Versions: Micro Focus ArcSight Logger versions prior to 7.2.2 Description: The issue affects Micro Focus ArcSight Logger, where potential vulnerabilities could be remotely exploited, resulting in Information Disclosure or Self Cross-Site Scripting XSS...

PT-2022-19113 · Hewlett Packard · Hpe Oneview

Name of the Vulnerable Software and Affected Versions: HPE OneView versions prior to 7.0 HPE OneView version 6.60.01 Description: A local disclosure of sensitive information issue was discovered. It allows a low privileged user to locally exploit the issue and disclose sensitive information,...

PT-2022-20629 · Dell · Unisphere For Powermax

Name of the Vulnerable Software and Affected Versions: Unisphere for PowerMax versions prior to 9.2.3.15 Description: The issue allows an adjacent malicious user to potentially exploit it and escalate their privileges, accessing functionalities they do not have access to. Recommendations: For...

PT-2022-4600 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions prior to 15.1.6 GitLab CE/EE versions 15.2 prior to 15.2.4 GitLab CE/EE versions 15.3 prior to 15.3.2 Description: A potential DOS issue was discovered in GitLab CE/EE. The issue is related to insufficient input validati...

PT-2022-13672 · WordPress · Leaflet Maps Marker

Name of the Vulnerable Software and Affected Versions: Leaflet Maps Marker WordPress plugin versions prior to 3.12.5 Description: The issue concerns the improper sanitization of certain parameters before they are inserted into SQL queries. This could allow high privilege users to perform SQL...

PT-2022-17253 · WordPress · Wp Hide & Security Enhancer

Name of the Vulnerable Software and Affected Versions: WP Hide & Security Enhancer WordPress plugin versions prior to 1.8 Description: The issue is related to a Reflected Cross-Site Scripting problem. It occurs because a parameter is not properly escaped before being outputted back in an attribut...

PT-2022-17386 · WordPress · Fluent Support

Name of the Vulnerable Software and Affected Versions: Fluent Support WordPress plugin versions prior to 1.5.8 Description: The issue is related to improper sanitization, validation, and escaping of various parameters in SQL statements, leading to an SQL Injection vulnerability. This vulnerabilit...

PT-2022-15618 · WordPress · Mailchimp For Woocommerce

Name of the Vulnerable Software and Affected Versions: Mailchimp for WooCommerce WordPress plugin versions prior to 2.7.1 Description: The issue allows any logged-in users, such as subscribers, to perform a POST request on behalf of the server to the internal network/LAN. The body of the request ...

PT-2022-20019 · Froxlor · Froxlor

Name of the Vulnerable Software and Affected Versions: froxlor versions prior to 0.10.38 Description: The issue is related to Cross-Site Request Forgery CSRF in the GitHub repository froxlor/froxlor. CSRF is an attack that tricks a user into performing unintended actions on a web application that...

OESA-2022-1854 varnish security update

This is Varnish Cache, a web application accelerator also known as a caching HTTP reverse proxy. You install it in front of any server that speaks HTTP and configure it to cache the contents. Varnish Cache is really, really fast. It typically speeds up delivery with a factor of 300 - 1000x,...

PT-2022-24694 · Freeciv +1 · Freeciv +1

Name of the Vulnerable Software and Affected Versions: Freeciv versions prior to 2.6.7 Freeciv versions prior to 3.0.3 Description: The issue is related to a buffer overflow vulnerability in the Modpack Installer utility's handling of the modpack URL. This vulnerability can be exploited due to...

PT-2022-23925 · Rsa · Archer Platform

Name of the Vulnerable Software and Affected Versions: Archer Platform versions prior to 6.11 P3 6.11.0.3 Description: The issue allows a remote unauthenticated malicious user to potentially exploit a reflected XSS vulnerability by tricking a victim application user into supplying malicious...