PT-2021-3353 · Mediawiki +1 · Mediawiki +1

Name of the Vulnerable Software and Affected Versions: MediaWiki versions 1.31.12 and earlier MediaWiki versions 1.32.x through 1.35.x before 1.35.2 Description: The issue exists due to the lack of protection for the web page structure, allowing a remote attacker to conduct cross-site scripting X...

PT-2021-17579 · Synology · Synology Diskstation Manager

Name of the Vulnerable Software and Affected Versions: Synology DiskStation Manager versions prior to 6.2.3-25426-3 Description: The issue is related to an Out-of-bounds Read vulnerability in the iscsi snapshot comm core component of Synology DiskStation Manager. This vulnerability allows remote...

PT-2021-20341 · Stormshield · Stormshield Network Security

Name of the Vulnerable Software and Affected Versions: Stormshield Network Security versions 2.0.0 through 2.7.7 Stormshield Network Security versions 2.8.0 through 2.16.0 Stormshield Network Security versions 3.0.0 through 3.7.16 Stormshield Network Security versions 3.8.0 through 3.11.4...

PT-2021-5552 · Openldap +7 · Openldap +7

Name of the Vulnerable Software and Affected Versions: OpenLDAP versions prior to 2.4.57 Description: An integer underflow was discovered in the Certificate List Exact Assertion processing, resulting in a denial of service. This issue can be exploited by a remote attacker, allowing them to send a...

PT-2021-13842 · Privoxy +3 · Privoxy +3

Name of the Vulnerable Software and Affected Versions: Privoxy versions prior to 3.0.29 Description: A flaw was found in Privoxy that causes a memory leak when client tags are active, potentially leading to a system crash. Recommendations: For versions prior to 3.0.29, update to version 3.0.29 or...

PT-2021-9741 · Comodo +1 · Combodo Itop +1

Name of the Vulnerable Software and Affected Versions: Combodo iTop versions prior to 2.7.2 and 3.0.0 Description: The issue affects Combodo iTop, a web-based IT Service Management tool. By modifying the target browser's local storage, an XSS can be generated in the iTop console breadcrumb...

PT-2021-3165

Name of the Vulnerable Software and Affected Versions FasterXML jackson-databind versions 2.x before 2.9.10.8 FasterXML jackson-databind versions 2.6.7.5 and earlier Description The issue is related to the interaction between serialization gadgets and typing, specifically with the...

PT-2020-15531 · Jenkins · Jenkins Active Directory Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Active Directory Plugin versions 2.19 and earlier Jenkins Active Directory Plugin versions prior to 2.20 and 2.16.1 Description: The issue allows attackers to log in as any user with any password while a successful authentication of...

PT-2020-20852 · Apple · Ios +2

Name of the Vulnerable Software and Affected Versions: Safari versions prior to 13.1.2 iOS versions prior to 13.6 iPadOS versions prior to 13.6 Description: A logic issue was addressed with improved restrictions. A malicious attacker may cause Safari to suggest a password for the wrong domain...

PT-2020-5068 · Node.Js +6 · Node.Js +6

Name of the Vulnerable Software and Affected Versions: Node.js versions prior to 12.18.4 Node.js versions prior to 14.11 Description: The issue is related to an error in processing HTTP header names, which can be exploited by a remote attacker to gain access to protected information or elevate...

PT-2020-20053 · Buffer List +2 · Bl +2

Name of the Vulnerable Software and Affected Versions: bl versions prior to 4.0.3 bl versions prior to 3.0.1 bl versions prior to 2.2.1 bl versions prior to 1.2.3 Description: A buffer over-read issue exists that could allow an attacker to supply user input that corrupts the BufferList state,...

PT-2020-5544 · Artifex +7 · Ghostscript +7

Name of the Vulnerable Software and Affected Versions: GhostScript versions prior to 9.51 Description: A null pointer dereference issue in the compose group nonknockout nonblend isolated allmask common function in base/gxblend.c allows a remote attacker to cause a denial of service via a crafted...

PT-2020-14791 · Temi · Temi Robox Os +1

Name of the Vulnerable Software and Affected Versions: temi Robox OS versions prior to 120 temi Android app versions up to 1.3.7931 Description: The issue allows remote attackers to listen in on ongoing calls between temi robots and their users if they can brute-force or guess a six-digit value...

PT-2020-3755

Name of the Vulnerable Software and Affected Versions: Adobe Acrobat versions prior to 2020.009.20074 Adobe Acrobat versions 2017.011.30171 and earlier Adobe Acrobat versions 2015.006.30523 and earlier Adobe Reader versions prior to 2020.009.20074 Adobe Reader versions 2017.011.30171 and earlier...

PT-2020-20844 · Apple +7 · Itunes For Windows +14

Name of the Vulnerable Software and Affected Versions: Apple iOS versions prior to 13.6 Apple iPadOS versions prior to 13.6 Apple tvOS versions prior to 13.4.8 Apple watchOS versions prior to 6.2.8 Apple Safari versions prior to 13.1.2 Apple iTunes for Windows versions prior to 12.10.8 Apple iClo...

PT-2020-12784 · Comodo +1 · Itop +1

Name of the Vulnerable Software and Affected Versions: iTop versions prior to 2.7.0 iTop essential and iTop professional versions prior to 2.6.4 Description: The issue allows dashboard ids to be exploited with a reflective XSS payload. Recommendations: For versions prior to 2.7.0, update to versi...

PT-2020-5484

Name of the Vulnerable Software and Affected Versions Django versions 2.2 before 2.2.13 Django versions 3.0 before 3.0.7 Description The issue is related to errors in the certificate authentication procedure in the Django library. It may allow a remote attacker to gain unauthorized access to...

PT-2020-6230 · Libslirp +8 · Libslirp +8

Name of the Vulnerable Software and Affected Versions: libslirp versions 4.2.0 and prior releases Description: The issue is related to a use after free vulnerability in the ip reass function in ip input.c of the libslirp library. This vulnerability can be exploited by crafted packets, leading to ...

PT-2019-6381 · Adobe · Acrobat Reader +1

Name of the Vulnerable Software and Affected Versions: Adobe Acrobat Reader versions 2019.021.20056 and earlier Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2015, Adobe Acrobat Reader 2015 Description: The issue is caused by a buffer overflow error in memory, which could allow an...

PT-2019-14419 · WordPress · Icegram Plugin

Name of the Vulnerable Software and Affected Versions: icegram plugin versions prior to 1.10.29 for WordPress Description: The issue is related to an ig cat list XSS in the icegram plugin for WordPress. Recommendations: For versions prior to 1.10.29, update to version 1.10.29 or later to resolve...