PT-2022-18900

Name of the Vulnerable Software and Affected Versions Acrobat Reader DC versions 22.001.20085 and earlier Acrobat Reader DC versions 20.005.3031x and earlier Acrobat Reader DC versions 17.012.30205 and earlier Description A use-after-free vulnerability in the processing of annotations could resul...

Puppet input validation vulnerability

Puppet is a set of configuration management tools based on client/server C/S architecture from Puppet Labs in the United States, which can be used to manage profiles, users, cron tasks, packages, system services, and more. A security vulnerability exists in the Puppet Firewall Module, which stems...

Out-of-bounds Memory Access

chromium:sid is vulnerable to out of bounds memory access. The vulnerability exist in A.scad file with no trailing newline allowing an out-of-bounds read during parsing of annotations...

br.net.woodstock.rockframework:rockframework-domain (>=1.2.1, <=1.2.2), com.googlecode:jpa-scoped-manager (1.1) +42 more potentially affected by CVE-2019-14900 via org.hibernate:hibernate-core (3.5.0-final)

org.hibernate:hibernate-core MAVEN version 3.5.0-final is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-core and may be impacted: - br.net.woodstock.rockframework:rockframework-domain =1.2.1, =1.9.3, =3.0-rc1, =3.1.18.release,...

org.hibernate:hibernate-annotations (3.5.0.beta-1), org.hibernate:hibernate-c3p0 (3.5.0.beta-1) +13 more potentially affected by CVE-2019-14900 via org.hibernate:hibernate-core (3.5.0.beta-1)

org.hibernate:hibernate-core MAVEN version 3.5.0.beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-core and may be impacted: - org.hibernate:hibernate-annotations 3.5.0.beta-1 - org.hibernate:hibernate-c3p0 3.5.0.beta-1 -...

org.hibernate:hibernate-annotations (3.5.0-beta-3), org.hibernate:hibernate-c3p0 (3.5.0-beta-3) +12 more potentially affected by CVE-2019-14900 via org.hibernate:hibernate-core (3.5.0-beta-3)

org.hibernate:hibernate-core MAVEN version 3.5.0-beta-3 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-core and may be impacted: - org.hibernate:hibernate-annotations 3.5.0-beta-3 - org.hibernate:hibernate-c3p0 3.5.0-beta-3 -...

org.hibernate:hibernate-annotations (3.5.0-beta-2), org.hibernate:hibernate-c3p0 (3.5.0-beta-2) +15 more potentially affected by CVE-2019-14900 via org.hibernate:hibernate-core (3.5.0-beta-2)

org.hibernate:hibernate-core MAVEN version 3.5.0-beta-2 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-core and may be impacted: - org.hibernate:hibernate-annotations 3.5.0-beta-2 - org.hibernate:hibernate-c3p0 3.5.0-beta-2 -...

org.hibernate:hibernate-annotations (3.5.0-cr-1), org.hibernate:hibernate-c3p0 (3.5.0-cr-1) +24 more potentially affected by CVE-2019-14900 via org.hibernate:hibernate-core (3.5.0-cr-1)

org.hibernate:hibernate-core MAVEN version 3.5.0-cr-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-core and may be impacted: - org.hibernate:hibernate-annotations 3.5.0-cr-1 - org.hibernate:hibernate-c3p0 3.5.0-cr-1 -...

org.hibernate:hibernate-annotations (3.4.0.cr1), org.hibernate:hibernate-c3p0 (3.3.0.cr1) +14 more potentially affected by CVE-2020-25638 via org.hibernate:hibernate-core (3.3.0.cr1)

org.hibernate:hibernate-core MAVEN version 3.3.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-core and may be impacted: - org.hibernate:hibernate-annotations 3.4.0.cr1 - org.hibernate:hibernate-c3p0 3.3.0.cr1 -...

org.hibernate:hibernate-annotations (3.5.0-cr-1), org.hibernate:hibernate-c3p0 (3.5.0-cr-1) +24 more potentially affected by CVE-2020-25638 via org.hibernate:hibernate-core (3.5.0-cr-1)

org.hibernate:hibernate-core MAVEN version 3.5.0-cr-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-core and may be impacted: - org.hibernate:hibernate-annotations 3.5.0-cr-1 - org.hibernate:hibernate-c3p0 3.5.0-cr-1 -...

org.hibernate:hibernate-annotations (3.5.0-beta-3), org.hibernate:hibernate-c3p0 (3.5.0-beta-3) +12 more potentially affected by CVE-2020-25638 via org.hibernate:hibernate-core (3.5.0-beta-3)

org.hibernate:hibernate-core MAVEN version 3.5.0-beta-3 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-core and may be impacted: - org.hibernate:hibernate-annotations 3.5.0-beta-3 - org.hibernate:hibernate-c3p0 3.5.0-beta-3 -...

com.googlecode:jpa-scoped-manager (1.0.4), org.hibernate:hibernate-annotations (3.5.0-beta-4) +13 more potentially affected by CVE-2020-25638 via org.hibernate:hibernate-core (3.5.0-beta-4)

org.hibernate:hibernate-core MAVEN version 3.5.0-beta-4 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-core and may be impacted: - com.googlecode:jpa-scoped-manager 1.0.4 - org.hibernate:hibernate-annotations 3.5.0-beta-4 -...

nuclei-templates

This is a GitHub repository for a community-curated list of templates for the Nuclei engine to find security vulnerabilities in applications. The repository contains various templates for the Nuclei scanner, which powers the actual scanning engine. The templates are provided by the project's team...

Foxit PhantomPDF Buffer Overflow

The vulnerability of the Foxit PhantomPDF PDF editing program and the Foxit Reader text viewing program for Windows operating systems relates to the execution of operations beyond the buffer in memory when processing annotation objects. Exploiting this vulnerability allows a malicious actor to...

PT-2021-27942

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a stack-buffer-overflow crash. Technical details about the crash include the pdfi annot draw, pdfi do annotations, and pdfi page...

GitLab ExifTool uploaded image command injection

Added: 11/24/2021 Background GitLab is an open-source software development platform with built-in version control and issue tracking. Problem A remote attacker can execute arbitrary commands by uploading a specially crafted image to GitLab, which executes injected Perl code when ExifTool parses...

GitLab ExifTool uploaded image command injection

Added: 11/24/2021 Background GitLab is an open-source software development platform with built-in version control and issue tracking. Problem A remote attacker can execute arbitrary commands by uploading a specially crafted image to GitLab, which executes injected Perl code when ExifTool parses...

Ingress-nginx custom snippets allows retrieval of ingress-nginx serviceaccount token and secrets across all namespaces

Issue Details A security issue was discovered in ingress-nginx where a user that can create or update ingress objects can use the custom snippets feature to obtain all secrets in the cluster. This issue has been rated High CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L, and assigned CVE-2021-25742...

com.googlecode.protobuf-rpc-pro:protobuf-rpc-pro-demo (3.0.0), com.googlecode.protobuf-rpc-pro:protobuf-rpc-pro-duplex (3.0.0) +13 more potentially affected by CVE-2021-37137 via io.netty:netty (3.5.10.final)

io.netty:netty MAVEN version 3.5.10.final is affected by a known vulnerability. The following packages have a transitive dependency on io.netty:netty and may be impacted: - com.googlecode.protobuf-rpc-pro:protobuf-rpc-pro-demo 3.0.0 - com.googlecode.protobuf-rpc-pro:protobuf-rpc-pro-duplex 3.0.0 ...

CVE-2021-34846

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...