PT-2022-24570 · Pypi · Exotel

Name of the Vulnerable Software and Affected Versions: exotel aka exotel-py version 0.1.6 Description: The exotel package in PyPI includes a code execution backdoor inserted by a third party. This backdoor allows for code execution, posing a significant security risk. Users should be aware of thi...

Denial Of Service (DoS)

libsox.so is vulnerable to denial of service. The vulnerability exists due to the floating point exception divide-by-zero in the readsamples function of voc.c, allowing an attacker to crash the application through the maliciously crafted file...

PT-2022-10744

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw was found in the way the dumpable flag setting was handled when certain SUID binaries executed its descendants. The prerequisite is a SUID binary that sets real UID equal to...

PT-2022-37331 · Pypi · Deep-Translator

Name of the Vulnerable Software and Affected Versions: deep-translator affected versions not specified Description: The deep-translator project on PyPI was compromised through a phishing attack, resulting in a malicious release that downloads and runs malware at install time by accessing some...

PT-2022-10324 · Satellite · Satellite

Name of the Vulnerable Software and Affected Versions: satellite affected versions not specified Description: A flaw was found that grants excessive permissions when giving granular permission related to the organization, allowing a user to view and manage other organizations. This poses a...

CVE-2022-37161

Claroline 13.5.7 and prior is vulnerable to Cross Site Scripting XSS via SVG file upload...

PT-2022-23426 · H3C · H3C Magic Nx18 Plus

Name of the Vulnerable Software and Affected Versions: H3C Magic NX18 Plus version NX18PV100R003 Description: A stack overflow issue was discovered via the function Edit BasicSSID. Recommendations: For H3C Magic NX18 Plus version NX18PV100R003, consider disabling the Edit BasicSSID function until...

PT-2022-4451 · Fatek · Fvdesigner

Name of the Vulnerable Software and Affected Versions: FATEK FvDesigner versions 1.5.103 and prior Description: The issue is related to an out-of-bounds write in memory while processing project files. This can be exploited by an attacker to achieve arbitrary code execution if a valid user is...

PT-2022-24089 · Tenda · Tenda Ac1206

Name of the Vulnerable Software and Affected Versions: Tenda AC1206 version 15.03.06.23 Description: A stack overflow issue was discovered via the startIp parameter in the formSetPPTPServer function. Recommendations: For Tenda AC1206 version 15.03.06.23, consider restricting access to the...

PT-2022-23811 · H3C · H3C H200

Name of the Vulnerable Software and Affected Versions: H3C H200 version H200V100R004 Description: A stack overflow issue was discovered via the function UpdateWanParams. Recommendations: For H3C H200 version H200V100R004, at the moment, there is no information about a newer version that contains ...

PT-2022-23394 · H3C · H3C B5 Mini

Name of the Vulnerable Software and Affected Versions: H3C B5 Mini version B5MiniV100R005 Description: A stack overflow issue was discovered via the function SetMacAccessMode. Recommendations: For H3C B5 Mini version B5MiniV100R005, consider disabling the SetMacAccessMode function until a patch i...

PT-2022-23430 · H3C · H3C Magic Nx18 Plus

Name of the Vulnerable Software and Affected Versions: H3C Magic NX18 Plus version NX18PV100R003 Description: A stack overflow issue was discovered via the function SetAPInfoById. This issue affects the H3C Magic NX18 Plus device. Recommendations: For H3C Magic NX18 Plus version NX18PV100R003, at...

PT-2022-23909 · Tenda · Tenda Ax12

Name of the Vulnerable Software and Affected Versions: Tenda AX12 version V22.03.01.21 CN Description: The issue is related to a Buffer Overflow that occurs in the sub 42FDE4 function. This function handles POST requests under the "/goform/SetIpMacBind" API endpoint, which is triggered by the sub...

PT-2022-23389 · Totolink · Totolink A3700R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3700R version 9.1.2u.6134 B20201202 Description: A stack overflow issue was discovered in the setDiagnosisCfg function via the ip parameter. Recommendations: For version 9.1.2u.6134 B20201202, avoid using the ip parameter in the...

PT-2022-8036 · Kirby · Kirby

Name of the Vulnerable Software and Affected Versions: Kirby version 2.5.12 Description: The issue allows malicious HTTP requests to be sent, which can trick a user into adding web pages. Recommendations: For Kirby version 2.5.12, at the moment, there is no information about a newer version that...

CVE-2022-25231 Denial of Service (DoS)

The package node-opcua before 2.74.0 are vulnerable to Denial of Service DoS by sending a specifically crafted OPC UA message with a special OPC UA NodeID, when the requested memory allocation exceeds the v8’s memory limit...

PT-2022-19257 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The issue has no verified impact. Recommendations: At the moment, there is no information about a newer version that contains a fix for this issue...

PT-2022-16658 · Asneg · Opcuastack

Name of the Vulnerable Software and Affected Versions: asneg/opcuastack versions affected versions not specified Description: The issue is related to a Denial of Service DoS due to a missing limitation on the number of received chunks per single session or in total for all concurrent sessions. An...

PT-2022-21204 · Wwbn · Avideo

Name of the Vulnerable Software and Affected Versions: WWBN AVideo versions 11.6 WWBN AVideo dev master commit 3f7c0364 Description: An issue exists in the login functionality due to an improper password check. This allows an attacker with a user's password hash to directly log into the account,...

PT-2022-19462 · Unknown · Notrinoserp

Name of the Vulnerable Software and Affected Versions: notrinoserp versions prior to v0.7 Description: The issue results in exposure of private personal information to an unauthorized actor, leading to privilege escalation to a system administrator account. This allows an attacker to gain access ...