CVE-2023-0090

Proofpoint Enterprise Protection (PPS/POD) webservices are affected by CVE-2023-0090: an anonymous user can trigger remote code execution via eval injection, requiring network access to the webservices API (non-default configuration) and impacting all versions 8.20.0 and below. Exploitation detai...

CVE-2023-0089

CVE-2023-0089 affects Proofpoint Enterprise Protection (PPS/POD) webutils. An authenticated user can execute remote code through an eval injection vulnerability, impacting all versions ≤ 8.20.0. The issue arises in the webutils component of PPS/POD, enabling high-severity impact (C, I, A: High) a...

JSA10376 - Pulse Policy Secure (PPS) Infranet Controller Webroot Path Disclosure Vulnerability

Last Modified Date Aug 24, 2026 12:35:05 AM...

Openldap Doesn’t Properly Handle Character in Subject Common Name (CVE-2009-3767)

Last Modified Date Aug 23, 2026 9:03:30 PM...

UBUNTU-CVE-2022-47087

GPAC MP4box 2.1-DEV-rev574-g9d5bb184b has a Buffer overflow in gfvvcreadppsbsinternal function of mediatools/avparsers.c...

CVE-2022-46334

CVE-2022-46334 affects Proofpoint Enterprise Protection (PPS/PoD) up to version 8.19.0. The issue allows the local pps user to escalate to root privileges due to unnecessary permissions. Impact is local privilege escalation with high severity (CVSS 3.1: 7.8). Remediation: upgrade to a version new...

CVE-2022-46334 Proofpoint Enterprise Protection Local Privilege Escalation

Proofpoint Enterprise Protection PPS/PoD contains a vulnerability which allows the pps user to escalate to root privileges due to unnecessary permissions. This affects all versions 8.19.0 and below...

CVE-2022-46332

The Admin Smart Search feature in Proofpoint Enterprise Protection PPS/PoD contains a stored cross-site scripting vulnerability that enables an anonymous email sender to gain admin privileges within the user interface. This affects all versions 8.19.0 and below...

CVE-2022-46333

CVE-2022-46333 affects Proofpoint Enterprise Protection (PPS/PoD) where the admin UI contains a command injection vulnerability allowing an admin to execute commands beyond their scope. Affected versions are 8.19.0 and earlier. The underlying issue is a command execution path in the admin interfa...

CVE-2022-46332

CVE-2022-46332 affects Proofpoint Enterprise Protection (PPS/PoD) with a stored cross-site scripting (XSS) vulnerability in the Admin Smart Search feature. Exploitation requires user interaction and anonymous access, enabling an attacker to gain admin privileges within the UI. Affected versions: ...

pdt-pps.com Cross Site Scripting vulnerability OBB-2514211

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-26511

WPS Presentation 11.8.0.5745 insecurely load d3dx941.dll when opening .pps files'current directory type' DLL loading...

CVE-2022-26511

WPS Presentation 11.8.0.5745 insecurely load d3dx941.dll when opening .pps files'current directory type' DLL loading...

Security update for chrony (moderate)

openSUSE Security Update: Security update for chrony Announcement ID: openSUSE-SU-2022:0845-1 Rating: moderate References: 1099272 1115529 1128846 1162964 1172113 1173277 1174075 1174911 1180689 1181826 1187906 1190926 1194229 SLE-17334 Cross-References: CVE-2020-14367 CVSS scores: CVE-2020-14367...

CVE-2020-14009

Affected product: Proofpoint Enterprise Protection (PPS/PoD) prior to version 8.16.4. Root cause: Messages with crafted/malformed multipart structures are not properly handled, enabling bypass of scanning and file-blocking rules. Impact: An attacker could deliver an email with a malicious attachm...

DEBIAN-CVE-2021-30020

In the function gfhevcreadppsbsinternal function in mediatools/avparsers.c in GPAC 1.0.1 there is a loop, which with crafted file, pps-numtilecolumns may be larger than sizeofpps-columnwidth, which results in a heap overflow in the loop...

DEBIAN-CVE-2021-30022

There is a integer overflow in mediatools/avparsers.c in the gfavcreadppsbsinternal in GPAC from 0.5.2 to 1.0.1. ppsid may be a negative number, so it will not return. However, avc-pps only has 255 unit, so there is an overflow, which results a crash...

UBUNTU-CVE-2021-30022

There is a integer overflow in mediatools/avparsers.c in the gfavcreadppsbsinternal in GPAC from 0.5.2 to 1.0.1. ppsid may be a negative number, so it will not return. However, avc-pps only has 255 unit, so there is an overflow, which results a crash...

GPAC 输入验证错误漏洞

GPAC is a multimedia framework for rich media and distributed under the LGPL license. An integer overflow vulnerability exists in gfavcreadppsbsinternal in mediatools/avparsers.c in GPAC version 1.0.1. An attacker could exploit this vulnerability to cause a program crash...

A week in security (June 22 – 28)

Last week on Malwarebytes Labs, we provided a zero-day guide for 2020 featuring recent attacks and advanced preventive techniques, and we learned how to cough in the face of scammers, offering security tips for the 2020 tax season. We also looked at a web skimmer hiding within EXIF metadata that...