PT-2023-13421 · Vermeg · Vermeg Agilereporter

Name of the Vulnerable Software and Affected Versions: VERMEG AgileReporter version 21.3 Description: An issue was discovered in VERMEG AgileReporter where XXE can occur via an XML document to the Analysis component. Recommendations: For VERMEG AgileReporter version 21.3, consider restricting...

The vulnerability of the Protobuf serialization protocol’s text analysis component, related to errors in resource release, allows a perpetrator to cause a service failure.

The vulnerability of the Protobuf serialization protocol’s text analysis component is related to errors during resource release. Exploiting this vulnerability allows a remote attacker to cause service failures...

PT-2020-20144 · Trend Micro · Ossec-Hids

Name of the Vulnerable Software and Affected Versions: OSSEC-HIDS versions 2.7 through 3.5.0 Description: The server component responsible for log analysis, ossec-analysisd, is vulnerable to a use-after-free during processing of ossec-alert formatted messages received from authenticated remote...