PT-2021-20434 · Jt2Go +1 · Jt2Go +2

Name of the Vulnerable Software and Affected Versions: JT2Go versions prior to V13.2 Teamcenter Visualization versions prior to V13.2 Description: A vulnerability has been identified in the Tiff Loader.dll library, which lacks proper validation of user-supplied data when parsing TIFF files. This...

PT-2021-11996 · Atlassian · Jira

Name of the Vulnerable Software and Affected Versions: Atlassian Jira Server and Data Center versions prior to 8.5.13 Atlassian Jira Server and Data Center versions 8.6.0 through 8.13.5 Atlassian Jira Server and Data Center versions 8.14.0 through 8.15.1 Description: The issue allows an...

PT-2021-19426 · Mediawiki +2 · Mediawiki +2

Name of the Vulnerable Software and Affected Versions: MediaWiki versions through 1.35.2 Description: An issue was discovered in the Oauth extension for MediaWiki. It did not validate the oarc version also known as oauth registered consumer.oarc version parameter's length. Recommendations: For...

PT-2021-14476 · Ampache · Ampache

Name of the Vulnerable Software and Affected Versions: Ampache versions prior to 4.4.1 Description: The issue allows unauthenticated access to Ampache using the subsonic API. To exploit this, an attacker must use a username that is not part of the site to bypass the auth checks. Recommendations:...

PT-2021-13868 · Privoxy +4 · Privoxy +4

Name of the Vulnerable Software and Affected Versions: privoxy versions prior to 3.0.32 Description: A flaw was found in the software, where invalid memory access with an invalid pattern passed to the pcre compile function may lead to denial of service. Recommendations: For versions prior to...

PT-2021-3622 · Percona +9 · Percona Server +10

Name of the Vulnerable Software and Affected Versions: MariaDB versions 10.2 through 10.2.37 MariaDB versions 10.3 through 10.3.28 MariaDB versions 10.4 through 10.4.18 MariaDB versions 10.5 through 10.5.9 Percona Server through 2021-03-03 wsrep patch through 2021-03-03 for MySQL Description: The...

PT-2020-14819 · Philips · Patient Information Center Ix +1

Name of the Vulnerable Software and Affected Versions: Patient Information Center iX PICiX versions C.02 through C.03 PerformanceBridge Focal Point version A.01 Description: The product receives input that is expected to be well-formed but does not validate or incorrectly validates that the input...

PT-2019-3096 · D Link · D-Link Dir-825Ac G1

Name of the Vulnerable Software and Affected Versions: D-link DIR-825AC G1 versions affected versions not specified Description: The issue is related to insufficient compartmentalization between a host network and a guest network established by the same device. These devices forward ARP requests...

PT-2018-14540 · Qihoo 360 · 360 Total Security

Name of the Vulnerable Software and Affected Versions: 360 Total Security version 3.5.0.1033 Description: The issue allows a Sandbox Escape via an import os statement, followed by os.system"CMD" or os.system"PowerShell", within a .py file. The vendor considers this a security-related issue but do...

PT-2018-10193 · Intel +4 · Lldptool +4

Name of the Vulnerable Software and Affected Versions: lldptool versions 1.0.1 and older Description: The issue allows an attacker to inject shell control characters into a buffer, potentially impacting the behavior of the terminal, when mngAddr information is displayed. This occurs because...

PT-2017-14826 · Ecmwf +1 · Metview +1

Name of the Vulnerable Software and Affected Versions: Metview version 4.7.3 Description: The issue concerns a lack of validation for strings before launching a program specified by the BROWSER environment variable, potentially allowing remote attackers to conduct argument-injection attacks via a...

PT-2013-4933

Name of the Vulnerable Software and Affected Versions OpenStack Compute Nova versions Folsom through Havana Description The issue is related to the "create an instance" API, which does not properly enforce the os-flavor-access:is public property. This allows remote authenticated users to boot...

PT-2008-5542 · Microsoft · Internet Explorer

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer version 7 Description: A remote code execution issue exists due to attempts to access uninitialized memory in certain situations. An attacker could exploit this by constructing a specially crafted Web page. When a...

PT-2005-2898 · Invision · Invision Gallery

Name of the Vulnerable Software and Affected Versions: Invision Gallery versions prior to 1.3.1 Description: A cross-site request forgery issue allows remote attackers to perform actions such as deleting albums and images as another user. This can be achieved via a link or IMG tag to specific...