PT-2019-12993 · Misp · Misp

Name of the Vulnerable Software and Affected Versions: MISP version 2.4.109 Description: The issue allows remote command execution by a super administrator due to the use of the PHP file exists function with user-controlled entries. Specifically, phar:// URLs can trigger deserialization, leading ...

PT-2019-12541 · Rancher · Rancher

Name of the Vulnerable Software and Affected Versions: Rancher versions prior to 2.2.4 Rancher version 2.1.4 Description: A vulnerability exists in the login component of Rancher, where the errorMsg parameter can be tampered to display arbitrary content. Although tags are filtered, special...

PT-2019-2152 · Cisco · Cisco Nx-Os +2

Name of the Vulnerable Software and Affected Versions: Cisco FXOS Software affected versions not specified Cisco NX-OS Software affected versions not specified Description: A vulnerability in the Simple Network Management Protocol SNMP input packet processor could allow an unauthenticated, remote...

PT-2019-9056 · Lg · Lg N1A1 Nas

Name of the Vulnerable Software and Affected Versions: LG N1A1 NAS version 3718.510 Description: The issue allows for remote command execution, enabling the execution of arbitrary code. The attack vector involves an HTTP POST request with specific parameters. Recommendations: For LG N1A1 NAS...

PT-2019-2094

Name of the Vulnerable Software and Affected Versions Windows 7 affected versions not specified Windows Server 2008 R2 affected versions not specified Description A remote code execution issue exists in Remote Desktop Services formerly known as Terminal Services due to a kernel Use-After-Free UAF...

PT-2019-10790

Name of the Vulnerable Software and Affected Versions Sierra Wireless AirLink ES450 version 4.9.3 Sierra Wireless AirLink ALEOS affected versions not specified Description A remote code execution issue exists in the upload.cgi functionality of Sierra Wireless AirLink devices. A crafted HTTP reque...

PT-2019-8304

Name of the Vulnerable Software and Affected Versions Billion 5200W-T version 1.02b.rc5.dt49 Description The issue is related to a command injection vulnerability in the Remote System Log forwarding function. This function is accessible to unauthenticated users and is located in the adv...

PT-2019-12099 · Rockwell Automation · Compactlogix 5370 +2

Name of the Vulnerable Software and Affected Versions: CompactLogix 5370 L1, L2, and L3 Controllers, Compact GuardLogix 5370 controllers, and Armor Compact GuardLogix 5370 Controllers versions 20 through 30 and earlier. Description: An attacker could send a crafted HTTP/HTTPS request to render th...

Improper access control

BPC SmartVista 2 has Improper Access Control in the SVFE module, where it fails to appropriately restrict access: a normal user is able to access the SVFE2/pages/finadmin/currconvrate/currconvrate.jsf functionality that should be only accessible to an admin...

PT-2019-3525 · Dovecot +3 · Dovecot +3

Name of the Vulnerable Software and Affected Versions: Dovecot versions 2.3.3 through 2.3.5.2 Description: The issue is related to the implementation of the Internet Message Access Protocol IMAP in the Dovecot mail server, specifically a null pointer dereference. This can be exploited by a remote...

PT-2019-9130 · Gnu · Gnuboard5

Name of the Vulnerable Software and Affected Versions: gnuboard5 versions prior to 5.3.1.6 Description: The issue is related to a Cross-Site Scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML in specific files, namely adm/boardgroup form...

PT-2019-9128 · Gnu · Gnuboard5

Name of the Vulnerable Software and Affected Versions: gnuboard5 versions prior to 5.3.1.6 Description: The issue allows remote attackers to inject arbitrary web script or HTML via a Cross-Site Scripting XSS vulnerability in the adm/sms admin/num book write.php and adm/sms admin/num book update.p...

PT-2019-2130 · Cisco · Cisco Registered Envelope Service

Name of the Vulnerable Software and Affected Versions: Cisco Registered Envelope Service versions 5.3.4.x Description: The issue is related to insufficient validation of user-supplied input by the web-based interface, allowing an attacker to conduct a cross-site scripting XSS attack. This could...

PT-2019-1922 · Mysql Server +5 · Mysql Server +5

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.15 and prior Description: The issue is related to insufficient access control in the MySQL Server component, specifically in the Optimizer subsystem. This can be exploited by a remote attacker to cause a denial of...

PT-2019-1950 · Mysql Server +5 · Mysql Server +5

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.15 and prior Description: The issue is related to insufficient access control in the MySQL Server component, specifically in the Optimizer subsystem. This can be exploited by a remote attacker to cause a denial of...

PT-2019-9289 · WordPress · Wp All Import

Name of the Vulnerable Software and Affected Versions: WP All Import plugin version 3.4.9 Description: The issue concerns multiple XSS vulnerabilities. These can be accessed via the "action=template" endpoint. It's worth noting that the vendor disputes this being a vulnerability, citing that WP A...

PT-2019-9290 · WordPress · Wp All Import

Name of the Vulnerable Software and Affected Versions: WP All Import plugin version 3.4.9 Description: The issue concerns an XSS vulnerability via the pmxi-admin-import custom type. It is noted that the vendor disputes this being a vulnerability, citing that WP All Import can only be used by a...

PT-2019-2752 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.0.8 Description: The issue is related to the implementation of the Siemens R3964 protocol driver in the Linux kernel, specifically in the drivers/tty/n r3964.c file. It involves errors in synchronization when...

PT-2019-8138 · Synology · Synology Diskstation Manager

Name of the Vulnerable Software and Affected Versions: Synology DiskStation Manager DSM versions prior to 6.1.4-15217-3 Description: A cross-site scripting XSS issue exists, allowing remote authenticated users to inject arbitrary web script or HTML. This is due to insufficient validation of user...

PT-2019-2967 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions 2.6 Description: A double-free issue exists in the idr remove all function in lib/idr.c. This can be exploited by an unprivileged local attacker to potentially escalate privileges or cause a system crash, resulting in a...