PT-2021-1612 · Microsoft · 365 Apps +4

Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Microsoft Office affected versions not specified Microsoft Office Online Server affected versions not specified Microsoft Office Web Apps Server affected versions not specified Microsoft 365 App...

Debian DSA-4811-1 : libxstream-java - security update

It was discovered that the default blacklist of XStream, a Java library to serialise objects to XML and back again, was vulnerable to the execution of arbitrary shell commands by manipulating the processed input stream. For additional defense-in-depth it is recommended to switch to the whitelist...

PT-2020-16636 · Google +1 · Android Kernel +1

Name of the Vulnerable Software and Affected Versions: Android kernel versions affected versions not specified Description: The issue concerns the Android kernel. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where th...

CVE-2020-26233

GCM Core on Windows is affected by CVE-2020-26233 prior to 2.0.289. When recursively cloning a repo with submodules, Git Credential Manager Core may start a malicious git.exe in the top-level repository instead of the PATH git when reading configuration, potentially enabling code execution. The i...

PT-2020-5240 · Microsoft · Azure Devops Server

Name of the Vulnerable Software and Affected Versions: Azure DevOps Server affected versions not specified Description: The issue is related to insufficient input validation in Azure DevOps Server, which can be exploited by a remote attacker to impact the confidentiality and integrity of protecte...

PT-2020-5263 · Microsoft · 365 Apps +2

Name of the Vulnerable Software and Affected Versions: Microsoft Outlook affected versions not specified Description: The issue is related to errors in the code of Microsoft Office, Microsoft Outlook, and Microsoft 365 Apps. It allows a remote attacker to disclose protected information. There is ...

PT-2020-5221 · Microsoft · Visual Studio

Name of the Vulnerable Software and Affected Versions: Microsoft Visual Studio affected versions not specified Description: The issue is related to incorrect code generation management in Microsoft Visual Studio. Exploitation of this issue may allow an attacker to execute arbitrary code...

PT-2020-5224 · Microsoft · Exchange Server

Name of the Vulnerable Software and Affected Versions: Microsoft Exchange affected versions not specified Description: The issue is related to incorrect code generation management in Microsoft Exchange Server. It allows a remote attacker to execute arbitrary code. Recommendations: At the moment,...

PT-2020-5265 · Microsoft · Sharepoint Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint affected versions not specified Description: The issue is related to errors in the code of Microsoft SharePoint, allowing a remote attacker to execute arbitrary code. This can be exploited by attackers to gain unauthorize...

CVE-2020-24719

Exposed Erlang Cookie could lead to Remote Command Execution RCE attack. Communication between Erlang nodes is done by exchanging a shared secret aka "magic cookie". There are cases where the magic cookie is included in the content of the logs. An attacker can use the cookie to attach to an Erlan...

CVE-2020-24719

Exposed Erlang Cookie could lead to Remote Command Execution RCE attack. Communication between Erlang nodes is done by exchanging a shared secret aka "magic cookie". There are cases where the magic cookie is included in the content of the logs. An attacker can use the cookie to attach to an Erlan...

PT-2020-4820 · Microsoft · Heif Image Extension

Name of the Vulnerable Software and Affected Versions: HEIF Image Extension affected versions not specified Description: The issue is related to incorrect code generation management in the HEIF Image Extension, which can be exploited by a remote attacker to execute arbitrary code. Recommendations...

PT-2020-4609 · Microsoft · Windows Uso Core Worker +1

Name of the Vulnerable Software and Affected Versions: Windows USO Core Worker affected versions not specified Description: The issue is related to insufficient access restrictions to certain functions in the Windows USO Core Worker component, allowing an attacker to potentially elevate their...

PT-2020-4826 · Microsoft · Windows Camera +1

Name of the Vulnerable Software and Affected Versions: Windows Camera affected versions not specified Description: The issue is related to a lack of protection for sensitive data in the Windows Camera Codec component, allowing an attacker to disclose protected information. This can potentially le...

PT-2023-21655 · Moodle +1 · Moodle +1

Name of the Vulnerable Software and Affected Versions: Moodle affected versions not specified Description: The issue arises when the algebra filter is enabled but not functional, typically due to missing necessary binaries from the server. This presents a cross-site scripting XSS risk...

PT-2020-19934 · Tcpdump +9 · Tcpdump +9

Name of the Vulnerable Software and Affected Versions: tcpdump version 4.9.3 Description: The issue concerns the ppp decapsulator in tcpdump, which can be tricked into allocating a large amount of memory. There is no information provided about the estimated number of potentially affected devices...

PT-2020-4665 · Cisco · Cisco Integrated Management Controller

Name of the Vulnerable Software and Affected Versions: Cisco Integrated Management Controller affected versions not specified Description: A vulnerability in the API endpoints of Cisco Integrated Management Controller could allow an authenticated, remote attacker to bypass authorization and take...

PT-2020-4713 · Cisco · Cisco Firepower Management Center

Name of the Vulnerable Software and Affected Versions: Cisco Firepower Management Center FMC Software affected versions not specified Description: The issue is related to an open redirect vulnerability in the web-based management interface. This could allow a remote attacker to redirect a user to...

PT-2020-4385 · Microsoft · Network Watcher Agent

Name of the Vulnerable Software and Affected Versions: Network Watcher Agent virtual machine extension for Linux affected versions not specified Description: An elevation of privilege issue exists in the Network Watcher Agent virtual machine extension for Linux. This could allow an attacker to...

PT-2020-4323 · Microsoft · Windows Storage Services +1

Name of the Vulnerable Software and Affected Versions: Windows Storage Services affected versions not specified Description: The issue is related to the improper handling of file operations by the Windows Storage Services, which could allow an attacker to gain elevated privileges. To exploit this...