PT-2020-5240 · Microsoft · Azure Devops Server

Name of the Vulnerable Software and Affected Versions: Azure DevOps Server affected versions not specified Description: The issue is related to insufficient input validation in Azure DevOps Server, which can be exploited by a remote attacker to impact the confidentiality and integrity of protecte...

PT-2020-5221 · Microsoft · Visual Studio

Name of the Vulnerable Software and Affected Versions: Microsoft Visual Studio affected versions not specified Description: The issue is related to incorrect code generation management in Microsoft Visual Studio. Exploitation of this issue may allow an attacker to execute arbitrary code...

PT-2020-5265 · Microsoft · Sharepoint Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint affected versions not specified Description: The issue is related to errors in the code of Microsoft SharePoint, allowing a remote attacker to execute arbitrary code. This can be exploited by attackers to gain unauthorize...

PT-2020-5224 · Microsoft · Exchange Server

Name of the Vulnerable Software and Affected Versions: Microsoft Exchange affected versions not specified Description: The issue is related to incorrect code generation management in Microsoft Exchange Server. It allows a remote attacker to execute arbitrary code. Recommendations: At the moment,...

PT-2020-5263 · Microsoft · 365 Apps +2

Name of the Vulnerable Software and Affected Versions: Microsoft Outlook affected versions not specified Description: The issue is related to errors in the code of Microsoft Office, Microsoft Outlook, and Microsoft 365 Apps. It allows a remote attacker to disclose protected information. There is ...

CVE-2020-24719

Exposed Erlang Cookie could lead to Remote Command Execution RCE attack. Communication between Erlang nodes is done by exchanging a shared secret aka "magic cookie". There are cases where the magic cookie is included in the content of the logs. An attacker can use the cookie to attach to an Erlan...

CVE-2020-24719

Exposed Erlang Cookie could lead to Remote Command Execution RCE attack. Communication between Erlang nodes is done by exchanging a shared secret aka "magic cookie". There are cases where the magic cookie is included in the content of the logs. An attacker can use the cookie to attach to an Erlan...

PT-2020-4820 · Microsoft · Heif Image Extension

Name of the Vulnerable Software and Affected Versions: HEIF Image Extension affected versions not specified Description: The issue is related to incorrect code generation management in the HEIF Image Extension, which can be exploited by a remote attacker to execute arbitrary code. Recommendations...

PT-2020-4609 · Microsoft · Windows Uso Core Worker +1

Name of the Vulnerable Software and Affected Versions: Windows USO Core Worker affected versions not specified Description: The issue is related to insufficient access restrictions to certain functions in the Windows USO Core Worker component, allowing an attacker to potentially elevate their...

PT-2020-4826 · Microsoft · Windows Camera +1

Name of the Vulnerable Software and Affected Versions: Windows Camera affected versions not specified Description: The issue is related to a lack of protection for sensitive data in the Windows Camera Codec component, allowing an attacker to disclose protected information. This can potentially le...

PT-2023-21655 · Moodle +1 · Moodle +1

Name of the Vulnerable Software and Affected Versions: Moodle affected versions not specified Description: The issue arises when the algebra filter is enabled but not functional, typically due to missing necessary binaries from the server. This presents a cross-site scripting XSS risk...

PT-2020-4665 · Cisco · Cisco Integrated Management Controller

Name of the Vulnerable Software and Affected Versions: Cisco Integrated Management Controller affected versions not specified Description: A vulnerability in the API endpoints of Cisco Integrated Management Controller could allow an authenticated, remote attacker to bypass authorization and take...

PT-2020-19934 · Tcpdump +9 · Tcpdump +9

Name of the Vulnerable Software and Affected Versions: tcpdump version 4.9.3 Description: The issue concerns the ppp decapsulator in tcpdump, which can be tricked into allocating a large amount of memory. There is no information provided about the estimated number of potentially affected devices...

PT-2020-4713 · Cisco · Cisco Firepower Management Center

Name of the Vulnerable Software and Affected Versions: Cisco Firepower Management Center FMC Software affected versions not specified Description: The issue is related to an open redirect vulnerability in the web-based management interface. This could allow a remote attacker to redirect a user to...

PT-2020-4385 · Microsoft · Network Watcher Agent

Name of the Vulnerable Software and Affected Versions: Network Watcher Agent virtual machine extension for Linux affected versions not specified Description: An elevation of privilege issue exists in the Network Watcher Agent virtual machine extension for Linux. This could allow an attacker to...

PT-2020-4323 · Microsoft · Windows Storage Services +1

Name of the Vulnerable Software and Affected Versions: Windows Storage Services affected versions not specified Description: The issue is related to the improper handling of file operations by the Windows Storage Services, which could allow an attacker to gain elevated privileges. To exploit this...

PT-2020-4426 · Cisco · Cisco Ios Xe

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software affected versions not specified Description: The issue is related to errors in access control for the Telnet/Secure Shell SSH command-line interface of Cisco IOS XE Software. This could allow an authenticated, local...

PT-2020-3812 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in the Storage Service component, which improperly handles file operations. This could allow an attacker to gain elevated...

PT-2020-22944

Name of the Vulnerable Software and Affected Versions Acrobat Reader versions 2020.009.20074 and earlier Acrobat Reader versions 2020.001.30002 and earlier Acrobat Reader versions 2017.011.30171 and earlier Acrobat Reader versions 2015.006.30523 and earlier Description An out-of-bounds read issue...

PT-2020-3763 · Microsoft · Internet Explorer

Name of the Vulnerable Software and Affected Versions: Internet Explorer affected versions not specified Description: A remote code execution issue exists due to the MSHTML engine's improper validation of input. This could allow an attacker to execute arbitrary code in the context of the current...