CVE-2018-2970

CVE-2018-2970 affects Oracle PeopleSoft: PeopleSoft Enterprise PeopleTools, subcomponent PIA Search Functionality, with affected versions 8.55 and 8.56. Connected CNVD-2019-28268 documents a vulnerability in this subcomponent that could let an attacker gain unauthorized access to data, aligning w...

PT-2018-15947

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise PeopleTools versions 8.55 and 8.56 Description The issue affects the PIA Search Functionality subcomponent, allowing a low-privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools...

CVE-2018-2970: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: PIA Search Functionality. Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2018-2929: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: PIA Core Technology. Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2018-10190

A vulnerability in London Trust Media Private Internet Access PIA VPN Client v77 for Windows could allow an unauthenticated, local attacker to run executable files with elevated privileges. The vulnerability is due to insufficient implementation of access controls. The "Changelog" and "Help"...

CVE-2018-10190

CVE-2018-10190 concerns London Trust Media Private Internet Access (PIA) VPN Client for Windows v77. The issue is a local privilege escalation caused by insufficient access controls: using the system tray’s Changelog/Help context menu can spawn an elevated instance of the user’s default browser, ...

CVE-2018-10190

A vulnerability in London Trust Media Private Internet Access PIA VPN Client v77 for Windows could allow an unauthenticated, local attacker to run executable files with elevated privileges. The vulnerability is due to insufficient implementation of access controls. The "Changelog" and "Help"...

CVE-2018-10190: Improper Privilege Management

A vulnerability in London Trust Media Private Internet Access PIA VPN Client v77 for Windows could allow an unauthenticated, local attacker to run executable files with elevated privileges. The vulnerability is due to insufficient implementation of access controls. The "Changelog" and "Help"...

PT-2018-9743

Name of the Vulnerable Software and Affected Versions: London Trust Media Private Internet Access PIA VPN Client version v77 Description: A vulnerability in the London Trust Media Private Internet Access PIA VPN Client could allow an unauthenticated, local attacker to run executable files with...

pia-magdeburg.de XSS vulnerability

Open Bug Bounty ID: OBB-582392 Description| Value ---|--- Affected Website:| pia-magdeburg.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Unspecified Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (CNVD-2018-02016)

PeopleSoft Enterprise PeopleTools provides a comprehensive set of development tools that support the development and runtime of PeopleSoft applications. An unspecified vulnerability exists in the PIA Core Technology component of Oracle PeopleSoft Enterprise PeopleTools. An attacker could exploit...

CVE-2018-2593: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: PIA Core Technology. Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...

Android Private Internet Access Denial Of Service Vulnerability

The Android application provided by Private Internet Access PIA VPN service can be crashed by downloading a large file containing a list of current VPN servers. This can be exploited by an MITM attacker via intercepting and replacing this file. While the file is digitally signed, it is not served...

Design/Logic Flaw

The London Trust Media Private Internet Access PIA application before 1.3.3.1 for Android allows remote attackers to cause a denial of service application crash via a large VPN server-list file...

CVE-2017-15882

The London Trust Media Private Internet Access PIA application before 1.3.3.1 for Android allows remote attackers to cause a denial of service application crash via a large VPN server-list file...

CVE-2017-15882

The London Trust Media Private Internet Access PIA application before 1.3.3.1 for Android allows remote attackers to cause a denial of service application crash via a large VPN server-list file...

CVE-2017-15882

The CVE-2017-15882 entry concerns the Private Internet Access (PIA) Android client prior to version 1.3.3.1. A remote attacker could cause a denial of service (application crash) by presenting the app with a very large VPN server-list file. The issue is tied to processing the server-list file (no...

Unspecified Vulnerability in Oracle PeopleSoft Products PeopleSoft Enterprise PeopleTools Component (CNVD-2017-31308)

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle Corporation, and PeopleSoft Enterprise PeopleTools is one of the tools and technology components that transforms the way organizations manage, use, and maintain their PeopleSoft software. PeopleSoft...

Unspecified Vulnerability in Oracle PeopleSoft Products PeopleSoft Enterprise PeopleTools Component (CNVD-2017-31838)

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle Corporation, and PeopleSoft Enterprise PeopleTools is one of the tools and technology components that transforms the way organizations manage, use, and maintain their PeopleSoft software. PeopleSoft...

CVE-2017-10381

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: PIA Core Technology. Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...