PT-2020-6435

Name of the Vulnerable Software and Affected Versions Jakarta Expression Language implementation version 3.0.3 and earlier Description The issue is related to a bug in the ELParserTokenManager function of the Jakarta Expression Language implementation, which allows invalid EL expressions to be...

PT-2019-4901

Name of the Vulnerable Software and Affected Versions VLC media player version 3.0.7.1 Description The issue is related to a use-after-free in the demux/asf/asf.c component of the VLC media player, which can be exploited by a remote attacker to impact the confidentiality, integrity, and...

PT-2019-4258

Name of the Vulnerable Software and Affected Versions Apache Solr versions prior to 8.2.0 Description The DataImportHandler module in Apache Solr has a feature that allows the whole DIH configuration to come from a request's dataConfig parameter. This parameter is a security risk since a DIH conf...

PT-2019-4485

Name of the Vulnerable Software and Affected Versions Linux kernel version 5.0.21 Description The issue is related to a use-after-free in the ext4 put super function in fs/ext4/super.c, which is connected to the dump orphan list function in the same file. This can occur when mounting a crafted ex...

CVE-2016-7550

asterisk 13.10.0 is affected by: denial of service issues in asterisk. The impact is: cause a denial of service remote...

PT-2019-3764

Name of the Vulnerable Software and Affected Versions ЕКRASMS-SP affected versions not specified Description The issue is related to the implementation of the interaction protocol between the "АРМ Релейщика" software and the "Сервер связи" software of the ЕКRASMS-SP complex. It involves a...

PT-2019-18066

Name of the Vulnerable Software and Affected Versions GL.iNet GL-AR300M-Lite version 2.27 Description A directory traversal issue in the storage cgi of GL.iNet GL-AR300M-Lite devices allows remote attackers to have an unspecified impact via directory traversal sequences. Recommendations For versi...

Mailtraq WebMail 2.17.7.3550 Cross Site Scripting

Exploit Title: Persistent Cross Site Scripting XSS - Mailtraq WebMail version 2.17.7.3550 CVE: CVE-2019-9558 Exploit Author: Aloyce J. Makalanga Contact: https://twitter.com/aloycemjr Vendor Homepage: http://www.mailtraq.com/mail-server-software Category: webapps Attack Type: Remote Impact:...

CVE-2018-11416

jpegoptim.c in jpegoptim 1.4.5 fixed in 1.4.6 has an invalid use of realloc and free, which allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact...

UBUNTU-CVE-2018-10753

Stack-based buffer overflow in the delayedoutput function in music.c in abcm2ps through 8.13.20 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact...

PT-2018-1233

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 Description The issue is caused by improper input validation, leading to memory corruption. It may allow a remote attacker to impact the confidentiality, integrity, and availability of protected information...

PT-2018-1209

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level Description The issue is related to errors in processing the WMI STA SMPS PARAM CMDID parameter in the Qualcomm WLAN component of the Android operating system. This can potentially allo...

PT-2018-1213

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level Description A buffer overflow issue occurs while processing smart card requests. This can potentially allow a remote attacker to impact the confidentiality, integrity, and availability ...

PT-2018-1250

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 Description The issue is related to improper handling of simultaneous interrupts in the USB module during USB RESET and EP COMPLETE, which can be exploited by a remote attacker to impact the confidentiality...

PT-2018-1247

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level Description The issue is caused by a lack of validation of pointers passed by secure apps, which could lead to an untrusted pointer dereference. This may allow a remote attacker to impa...

PT-2018-3449

Name of the Vulnerable Software and Affected Versions: corosync versions prior to 2.4.4 Description: The issue is caused by an integer overflow in the exec/totemcrypto.c function of the corosync system, which can be exploited by a remote attacker to impact the confidentiality, integrity, and...

PT-2018-1284

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-01-05 Description The issue is related to insufficient access control in the Qualcomm Trusted Execution Environment component of the Android operating system. This could allow a remote attacker to impact the...

PT-2020-5463

Name of the Vulnerable Software and Affected Versions FasterXML jackson-databind versions 2.0.0 through 2.9.10.3 FasterXML jackson-databind versions 2.6.0 through 2.6.7.3 Description The issue is related to the interaction between serialization gadgets and typing, specifically with...

PT-2017-3912

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.3 Description The issue is related to the mishandling of SMB data printing in tcpdump, which can be exploited by a remote attacker to impact the confidentiality, integrity, and availability of protected informatio...

DEBIAN-CVE-2017-12133

Use-after-free vulnerability in the clntudpcall function in sunrpc/clntudp.c in the GNU C Library aka glibc or libc6 before 2.26 allows remote attackers to have unspecified impact via vectors related to error path...