PT-2022-19251 · Carlo Gavazzi · Carlo Gavazzi Uwp3.0

Name of the Vulnerable Software and Affected Versions: Carlo Gavazzi UWP3.0 affected versions not specified CPY Car Park Server version 2.8.3 Description: A remote, unauthenticated attacker could utilize an improper input validation on an API-submitted parameter to execute arbitrary OS commands...

PT-2022-37301 · Perfetto · Perfetto

Name of the Vulnerable Software and Affected Versions: perfetto affected versions not specified Description: The issue is related to a crash in the perfetto trace processor. The crash occurs in the TrackEventParser::ParseTrackDescriptor function, which is called by TrackEventModule::ParsePacket a...

PT-2022-4861 · Uclibc-Ng +2 · Uclibc-Ng +3

Name of the Vulnerable Software and Affected Versions: libpthread, linuxthreads, uClibC, and uClibC-ng affected versions not specified Description: The issue is related to a potential memory corruption in the al cpLocation function of the libpthread and linuxthreads libraries in uClibC and...

PT-2022-24623 · Pbc · Pbc

Name of the Vulnerable Software and Affected Versions: PBC through 2022-8-27 Description: A SEGV issue was detected in the function pbc wmessage integer in src/wmessage.c:137. This issue affects PBC. Recommendations: For PBC through 2022-8-27, as a temporary workaround, consider disabling the pbc...

PT-2022-25467 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about a specific vulnerability. It appears to be a notification about a candidate number that...

PT-2022-37298 · Git +1 · Mongoose

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type identified as "Use-after-poison READ 1". The crash state includes references to rx ip, mip rx, and a file named...

PT-2022-21434 · Unknown · Ikus060/Minarca

Name of the Vulnerable Software and Affected Versions: ikus060/minarca versions prior to 4.2.2 Description: The issue concerns weak password requirements in the GitHub repository ikus060/minarca. Recommendations: For versions prior to 4.2.2, update to version 4.2.2 or later to resolve the issue...

PT-2022-22511 · Otfcc +1 · Otfcc +1

Name of the Vulnerable Software and Affected Versions: OTFCC commit 617837b Description: A segmentation violation was discovered in OTFCC via the /release-x64/otfccdump+0x703969 endpoint. Recommendations: For OTFCC commit 617837b, consider restricting access to the /release-x64/otfccdump+0x703969...

PT-2022-37293 · Git +1 · Ghostscript

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 1 crash has been reported. The crash state includes Ins PUSHW, RunIns, and Instance Reset. Recommendations: At the moment,...

Server-Side Request Forgery

seo-by-rank-math is vulnerable to server-side request forgery. The vulnerability exists in the archiveredirect function in class-frontend.php because it doesn't properly validate urls which allows a remote attacker to cause an ssrf bypass via a crafted url...

PT-2022-21349 · Minarca · Minarca

Name of the Vulnerable Software and Affected Versions: minarca versions prior to 4.2.2 Description: The issue concerns a sensitive cookie in an HTTPS session that lacks the 'Secure' attribute. This problem is identified in the GitHub repository ikus060/minarca. Recommendations: For versions prior...

PT-2022-5132 · Arr-Pm · Arr-Pm

Name of the Vulnerable Software and Affected Versions: Arr-pm versions prior to 0.0.12 Description: The issue is related to OS command injection, which can result in shell execution if an RPM contains a malicious payload compressor field. This impacts the extract and files methods of the RPM::Fil...

PT-2022-16359 · Keylime · Keylime

Name of the Vulnerable Software and Affected Versions: Keylime versions prior to 6.3.0 Description: The issue allows unsanitized UUIDs to be passed by a rogue agent, leading to log spoofing on the verifier and registrar. Recommendations: For versions prior to 6.3.0, update to version 6.3.0 or lat...

Denial Of Service (DoS)

tensorflow is vulnerable for denial of service. The vulnerability exists because ComputeOpKernelContext context function in maxpoolingop.cc allows the attacker to make the gpu kernel give a check fail that can be used to trigger a denial of service attack by sending a window size input array with...

PT-2022-37378 · Pypi · Democritus-Networking +1

Name of the Vulnerable Software and Affected Versions: d8s-ip-addresses version 0.1.0 Description: The d8s-ip-addresses package for python, distributed on PyPI, contains a potential code-execution backdoor. This backdoor is attributed to the democritus-networking package, which was inserted by a...

PT-2022-24449 · Valine · Valine

Name of the Vulnerable Software and Affected Versions: Valine version 1.4.18 Description: The issue allows attackers to execute arbitrary code via a crafted POST request, enabling remote code execution RCE. This can be achieved by sending a specifically designed request to the affected system...

PT-2022-25547 · Pypi · D8S-Dates +1

Name of the Vulnerable Software and Affected Versions: d8s-dates version 0.1.0 Description: The d8s-dates for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-hypothesis package. Recommendations: For version...

PT-2022-25186 · Tenda · Tenda Ac21

Name of the Vulnerable Software and Affected Versions: Tenda AC21 version 16.03.08.15 Description: The issue is related to a Buffer Overflow that can occur via the /bin/httpd, specifically in the function: setSmartPowerManagement. Recommendations: For Tenda AC21 version 16.03.08.15, consider...

PT-2022-25380 · Pypi · Democritus-Networking +1

Name of the Vulnerable Software and Affected Versions: d8s-pdfs version 0.1.0 Description: The d8s-pdfs for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-networking package. Recommendations: For version 0.1.0...

PT-2022-25189 · Tenda · Tenda Ac21

Name of the Vulnerable Software and Affected Versions: Tenda AC21 version 16.03.08.15 Description: The issue is related to a Buffer Overflow vulnerability. It can be exploited via the /bin/httpd endpoint, specifically through the form fast setting wifi set parameter. Recommendations: For Tenda AC...