PT-2021-19359 · Opentext · Opentext Brava! Desktop

Name of the Vulnerable Software and Affected Versions: OpenText Brava! Desktop version 16.6.3.84 Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious file...

PT-2021-10674

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10.2641 Description: A heap-based buffer overflow issue exists. The problem is located in the escape.c file at line 51, specifically via htmlescape. Recommendations: For GNU LibreDWG version 0.10.2641, consider...

PT-2020-14538 · Centos · Centos Web Panel

Name of the Vulnerable Software and Affected Versions: CentOS Web Panel version cwp-e17.0.9.8.923 Description: This issue allows remote attackers to execute arbitrary code on affected installations. Authentication is not required to exploit this issue. The flaw exists within the ajax ftp...

PT-2019-5697 · Red Hat · Cloudforms Management Engine

Name of the Vulnerable Software and Affected Versions: CloudForms Management Engine versions 5.10 through 5.11 Description: The issue is related to insufficient input validation, allowing a remote attacker to elevate privileges to root level and execute arbitrary code. An attacker logged into the...

PT-2019-3537 · Zingbox · Zingbox Inspector

Name of the Vulnerable Software and Affected Versions: Zingbox Inspector versions 1.286 and earlier Description: A command injection issue exists, allowing an authenticated user to execute arbitrary system commands in the CLI. The vulnerability is also related to the network traffic handler, whic...

PT-2019-14504 · Symonics +2 · Libmysofa +2

Name of the Vulnerable Software and Affected Versions: Symonics libmysofa version 0.7 Description: The issue is related to an invalid read in the getDimension function located in hrtf/reader.c. This problem can lead to unintended behavior. Recommendations: For Symonics libmysofa version 0.7,...

PT-2022-11275 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: GPAC version 1.0.1 Description: The issue allows attackers to cause a denial of service via a crafted file in the MP4Box command, specifically through the gf bs write data function. Recommendations: For GPAC version 1.0.1, consider disabling...

PT-2016-1204 · Adobe +3 · Integrated Runtime +4

Name of the Vulnerable Software and Affected Versions: Adobe Integrated Runtime and Flash Player affected versions not specified Description: The issue is related to a use-after-free vulnerability in the instanceof function of Adobe Integrated Runtime and Flash Player, which is associated with th...

PT-2013-4251 · Videolan · Vlc Media Player

Name of the Vulnerable Software and Affected Versions: VideoLAN VLC Media Player version 2.0.7 Description: The issue allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted MKV file. This could involve an integer overflow, out-of-bounds read, ...

PT-2013-4748 · Atlassian · Crowd

Name of the Vulnerable Software and Affected Versions: Atlassian Crowd version 2.6.3 Description: The issue allows remote attackers to execute arbitrary commands. The vendor was unable to reproduce the issue as of 20130704 and stated that they could not substantiate the existence of the problem d...

PT-2012-1046 · Debian · Hostapd

Name of the Vulnerable Software and Affected Versions: hostapd versions 0.6 through 1.0 Description: The issue concerns multiple vulnerabilities in the hostapd package of the Debian GNU/Linux operating system, which can be exploited remotely to disrupt the availability of protected information...

PT-2008-5798 · Red Hat · Fence

Name of the Vulnerable Software and Affected Versions: fence versions 2.02.00-r1 Description: The issue allows local users to modify arbitrary files via a symlink attack on the fence manual.fifo temporary file. This is related to the fence manual component, which is used in fence and possibly cma...