PT-2022-33447 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.13 through v5.19.1 Description: A potential security issue has been identified in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v5.13 and is...

PT-2022-33408 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.4 Description: A memory leak issue exists in the j1939 session destroy function, potentially leading to security vulnerabilities. The actual impact and attack plausibility have not yet been proven...

PT-2022-33422 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.4 Description: A memory leak issue was discovered, which may potentially lead to security vulnerabilities. The issue was introduced in version v5.14 and is fixed in Linux Kernel version v5.19.4...

PT-2022-33471 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: The issue is related to a refcount leak in the qcom smd parse edge function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2022-33231 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.19 through v5.19.7 Description: A memory leak was discovered in the firmware upload process. The issue was introduced in version v5.19 and is fixed in version v5.19.8. Recommendations: For Linux Kernel versions v5.19...

PT-2022-33540 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: The issue concerns a potential security vulnerability related to an snprintf overflow in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations...

PT-2022-33565 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: A refcount leak was discovered in the meson encoder hdmi init function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior t...

PT-2022-33550 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.3 through v5.19.1 Description: A refcount leak was discovered in the mcde dsi bind function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions v5.3 through...

PT-2022-33239 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.8 Description: The issue is related to an annotated data-race around challenge timestamp. It was introduced in version v3.8 and fixed in version v5.19.8. The actual impact and attack plausibility have not...

PT-2022-33296 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.4 through v5.19.5 Description: A data-race issue exists around gro normal batch. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions v5.4 through v5.19.5,...

PT-2022-33312 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.6 Description: The issue concerns a logic flaw in the LAG Link Aggregation functionality over the MLX5 LAG FLAG NDEVS READY flag. The actual impact and potential for attack have not been proven yet...

PT-2022-33564 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.6 through v5.19.1 Description: The issue is related to a netdev open race in the ath11k component. It was introduced in version v5.6 and fixed in version v5.19.2. The actual impact and attack plausibility have not yet...

PT-2022-33291 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.6 Description: The issue is related to the perf/x86/lbr component of the Linux Kernel, where the branch type for the Arch LBR is enabled by default. The actual impact and attack plausibility have not yet...

PT-2022-33548 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: The issue is related to the hinic get stats64 function, which may cause a kernel hang. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2022-33446 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: The issue concerns a potential security vulnerability in the Linux Kernel. It was introduced in version v5.12 and fixed in version v5.19.2. The actual impact and attack plausibility have not...

PT-2022-33417 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.4 Description: The issue concerns the mptcp subflow cleanup in the mptcp destroy common function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2022-19211 · Zoom · Zoom On-Premise Meeting Connector Mmr

Name of the Vulnerable Software and Affected Versions: Zoom On-Premise Meeting Connector MMR versions prior to 4.8.20220815.130 Description: The issue allows a malicious actor to obtain the audio and video feed of a meeting they were not authorized to join, causing meeting disruptions due to...

TYPO3 HTML Sanitizer Bypasses Cross-Site Scripting Protection

Meta CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:F/RL:O/RC:C 5.7 Problem Due to a parsing issue in upstream package masterminds/html5, malicious markup used in a sequence with special HTML comments cannot be filtered and sanitized. This allows to by-pass the cross-site scripting mechanis...

PT-2022-21170 · Parse-Url · Url-Parse

Name of the Vulnerable Software and Affected Versions: parse-url versions prior to 8.1.0 Description: The issue concerns a misinterpretation of input in the parse-url library, where certain HTTP or HTTPS URLs are parsed incorrectly. Specifically, the library may identify the URL's protocol as SSH...

PT-2022-25444 · Ansys · Ansys Spaceclaim

Name of the Vulnerable Software and Affected Versions: Ansys SpaceClaim version 2022 R1 Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The fla...