PT-2023-8986 · Dell Emc · Dell Emc Networker

Name of the Vulnerable Software and Affected Versions: Dell EMC NetWorker affected versions not specified Description: The issue is related to an unauthenticated remote code execution vulnerability in the NetWorker Client execution service nsrexecd. This vulnerability may allow a remote attacker ...

PT-2023-15574 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The descriptions mention an issue but do not provide specific details about it, such as its nature, potential impact, or affected systems. They appear t...

PT-2023-35517 · Git +1 · Clamav

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type identified as Memcpy-param-overlap, according to an OSS-Fuzz report. The crash state includes repeat and p ere, but ...

PT-2022-14750 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: A missing permission check in the createDialog of WifiScanModeActivity.java allows a Guest user to enable location-sensitive settings. This could lead to local escalation of privilege from the Guest us...

CVE-2022-34313

IBM CICS TX 11.1 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can...

Borrower can put their address when submiting addCredit() which can make the lender not be able to withdraw tokens

Lines of code Vulnerability details Impact when calling addCredit by borrower, they can choose to put in their address as the lender instead of the actuall lender. this can bring problems later on when the lender is trying to withdraw funds from the contract. they wont be able to withdraw the fun...

PT-2022-21411 · Vcu · Vcu

Name of the Vulnerable Software and Affected Versions: vcu affected versions not specified Description: The issue is related to a possible memory corruption due to a race condition, which could lead to local escalation of privilege. System execution privileges are needed for exploitation, and use...

PT-2022-25330 · Php Point Of Sale Llc +1 · Php Point Of Sale

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The application has a CSV injection issue in its data export functionality. This allows malicious code to be embedded within the export data, which can...

CVE-2022-37914

Vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an unauthenticated remote attacker to bypass authentication. Successful exploitation of these vulnerabilities could allow an attacker to gain administrative privileges leading to a...

PT-2022-18936 · Tenable · Nessus Essentials +2

Name of the Vulnerable Software and Affected Versions: Nessus Essentials and Professional affected versions not specified Description: The issue allows an authenticated user with debug privileges to retrieve stored Nessus policy credentials from the "nessusd" process in cleartext via process...

Online Tours & Travels Management System SQL注入漏洞

Online Tours & Travels Management System is an online travel management system by Mayuri K. Individual developer. A SQL injection vulnerability exists in Online Tours & Travels Management System v1.0, which originates from a SQL injection point in the id parameter in /user/updatebooking.php...

PT-2022-5318 · Microsoft · Windows Dhcp Client +1

Name of the Vulnerable Software and Affected Versions: Windows DHCP Client affected versions not specified Description: The issue is related to a lack of protection for service data in the Windows DHCP client, which can be exploited to gain unauthorized access to protected information. This can...

PT-2022-25370 · Chamilo · Chamilo

Name of the Vulnerable Software and Affected Versions: Chamilo version 1.11 Description: A zip slip vulnerability in the file upload function allows attackers to execute arbitrary code via a crafted Zip file. Recommendations: For Chamilo version 1.11, update to a version that fixes the zip slip...

PT-2022-23937 · Unknown · Php Crafts Accommodation System

Name of the Vulnerable Software and Affected Versions: PHP Crafts Accommodation System plugin version 1.0.1 and earlier Description: The issue is related to a Missing Access Control vulnerability. Recommendations: For PHP Crafts Accommodation System plugin version 1.0.1 and earlier, update to a...

PT-2022-17872 · Vow · Vow

Name of the Vulnerable Software and Affected Versions: vow affected versions not specified Description: The issue is related to an incorrect bounds check, which could lead to a possible out of bounds write. This might result in local escalation of privilege. System execution privileges are needed...

PT-2022-24812 · Nextcloud +1 · Nextcloud Server +2

Name of the Vulnerable Software and Affected Versions: Nextcloud Server versions prior to 23.0.8 Nextcloud Server versions prior to 24.0.4 Nextcloud Enterprise Server versions prior to 22.2.10.4 Nextcloud Enterprise Server versions prior to 23.0.8 Nextcloud Enterprise Server versions prior to...

PT-2022-12209 · Wolfssl +1 · Wolfssl +1

Name of the Vulnerable Software and Affected Versions: wolfSSL versions through 5.0.0 Description: The issue allows an attacker to cause a denial of service and infinite loop in the client component by sending crafted traffic from a Machine-in-the-Middle MITM position. The root cause is that the...

Google Chrome 安全漏洞

Google Chrome is a web browser from Google Inc. A security vulnerability exists in Google Chrome, which stems from an improperly implemented issue in Chrome OS lockscreen, and affects the following products and versions: Chrome before 105.0.5195.52 Mac/linux and before 105.0.5195.52/53/54 Windows...

UBUNTU-CVE-2022-2621

Use after free in Extensions in Google Chrome prior to 104.0.5112.79 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via specific UI interactions...

PT-2022-17840 · Mediatek +2 · Mt6833 +2

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a possible out of bounds write in the mailbox due to a missing bounds check. This could lead to local escalation of privilege,...