PT-2022-21726 · WordPress · Wpdevelop/Oplugins Booking Calendar

Name of the Vulnerable Software and Affected Versions: WPdevelop/Oplugins Booking Calendar plugin versions prior to 9.2.1 Description: A Cross-Site Request Forgery CSRF issue exists, allowing unauthorized actions related to Translations Update. Recommendations: For WPdevelop/Oplugins Booking...

PT-2022-19364 · Chatwoot · Chatwoot

Name of the Vulnerable Software and Affected Versions: chatwoot/chatwoot versions prior to 2.8 Description: The issue is related to improper authorization in the GitHub repository chatwoot/chatwoot. Recommendations: For versions prior to 2.8, update to version 2.8 or later to resolve the issue...

PT-2022-20055 · Fortinet · Fortisoar

Name of the Vulnerable Software and Affected Versions: Fortinet FortiSOAR versions prior to 7.2.1 Description: The issue is related to improper privilege management, allowing a GUI user who has already found a way to modify system files to execute arbitrary Python commands as root. Recommendation...

PT-2022-23130 · Unknown · Reactphp Http

Name of the Vulnerable Software and Affected Versions: ReactPHP HTTP versions 0.7.0 through 1.7.0 Description: The issue arises when ReactPHP's HTTP server component processes incoming HTTP cookie values, url-decoding the cookie names. This can lead to confusion between cookies with prefixes like...

PT-2022-23148 · Discourse · Discourse-Chat

Name of the Vulnerable Software and Affected Versions: Discourse-Chat versions prior to 0.9 Description: The issue affects users of Discourse Chat, an asynchronous messaging plugin for the Discourse open-source discussion platform. Admin users can insert HTML into chat titles and descriptions,...

PT-2022-25815 · Kitty +4 · Kitty +4

Name of the Vulnerable Software and Affected Versions: Kitty versions prior to 0.26.2 Description: The issue is related to insufficient validation in the desktop notification escape sequence, which can lead to arbitrary code execution. This occurs when a user displays attacker-controlled content ...

PT-2022-18245 · Unknown · Rosariosis Student Information System +1

Name of the Vulnerable Software and Affected Versions: rosariosis versions prior to 10.0 RosarioSIS Student Information System versions prior to 10.1 Description: The issue is related to improper handling of length parameter inconsistency in the GitHub repository francoisjacquet/rosariosis...

PT-2022-25029 · Unknown · Cotonti Siena

Name of the Vulnerable Software and Affected Versions: Cotonti Siena version 0.9.20 Description: The issue allows admins to conduct stored XSS attacks via a forum post. Recommendations: For Cotonti Siena version 0.9.20, update to a version that fixes this issue, as using the current version may...

PT-2022-7694 · Drawio +1 · Drawio +1

Name of the Vulnerable Software and Affected Versions: drawio versions prior to 20.3.0 Description: The issue is related to the incorrect neutralization of special elements used in an OS command, which can allow a remote attacker to execute arbitrary commands. Recommendations: For versions prior ...

SUSE-SU-2022:3001-1 Security update for json-c

This update for json-c fixes the following issues: - CVE-2020-12762: Fixed an integer overflow that could lead to memory corruption via a large JSON file bsc1171479. Non-security fixes: - Updated to version 0.12.1 jscPED-1778...

Google Chrome Bug Lets Sites Silently Overwrite System Clipboard Content

A "major" security issue in the Google Chrome web browser, as well as Chromium-based alternatives, could allow malicious web pages to automatically overwrite clipboard content without requiring any user consent or interaction by simply visiting them. The clipboard poisoning attack is said to have...

PT-2022-22148 · Dell · Dell Powerscale Onefs

Name of the Vulnerable Software and Affected Versions: Dell PowerScale OneFS versions 9.0.0 up to and including 9.1.0.20 Dell PowerScale OneFS version 9.2.1.13 Dell PowerScale OneFS version 9.3.0.6 Dell PowerScale OneFS version 9.4.0.3 Description: The issue concerns the insertion of sensitive...

PT-2022-4593 · Weave · Weave Gitops Enterprise

Name of the Vulnerable Software and Affected Versions: Weave GitOps Enterprise versions prior to 0.9.0-rc.5 Description: The issue is related to a lack of input data sanitization, which can be exploited by a remote attacker to conduct a cross-site scripting XSS attack using a specially crafted...

WordPress Multiple Vulnerabilities (Aug 2022) - Linux

WordPress is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wordpress:wordpress"; ifdescripti...

PT-2022-17791 · Micro Focus · Micro Focus Arcsight Logger

Name of the Vulnerable Software and Affected Versions: Micro Focus ArcSight Logger versions prior to 7.2.2 Description: The issue affects Micro Focus ArcSight Logger, where potential vulnerabilities could be remotely exploited, resulting in Information Disclosure or Self Cross-Site Scripting XSS...

PT-2022-19113 · Hewlett Packard · Hpe Oneview

Name of the Vulnerable Software and Affected Versions: HPE OneView versions prior to 7.0 HPE OneView version 6.60.01 Description: A local disclosure of sensitive information issue was discovered. It allows a low privileged user to locally exploit the issue and disclose sensitive information,...

PT-2022-20629 · Dell · Unisphere For Powermax

Name of the Vulnerable Software and Affected Versions: Unisphere for PowerMax versions prior to 9.2.3.15 Description: The issue allows an adjacent malicious user to potentially exploit it and escalate their privileges, accessing functionalities they do not have access to. Recommendations: For...

PT-2022-4600 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions prior to 15.1.6 GitLab CE/EE versions 15.2 prior to 15.2.4 GitLab CE/EE versions 15.3 prior to 15.3.2 Description: A potential DOS issue was discovered in GitLab CE/EE. The issue is related to insufficient input validati...

PT-2022-13672 · WordPress · Leaflet Maps Marker

Name of the Vulnerable Software and Affected Versions: Leaflet Maps Marker WordPress plugin versions prior to 3.12.5 Description: The issue concerns the improper sanitization of certain parameters before they are inserted into SQL queries. This could allow high privilege users to perform SQL...

PT-2022-17253 · WordPress · Wp Hide & Security Enhancer

Name of the Vulnerable Software and Affected Versions: WP Hide & Security Enhancer WordPress plugin versions prior to 1.8 Description: The issue is related to a Reflected Cross-Site Scripting problem. It occurs because a parameter is not properly escaped before being outputted back in an attribut...