PT-2019-14052 · WordPress · Ad Inserter

Name of the Vulnerable Software and Affected Versions: ad-inserter plugin versions prior to 2.4.20 Description: The issue allows for path traversal. Recommendations: For versions prior to 2.4.20, update to version 2.4.20 or later to resolve the issue...

PT-2019-13557 · Mastercactapus +2 · Proxyprotocol +3

Name of the Vulnerable Software and Affected Versions: mastercactapus proxyprotocol versions prior to 0.0.2 mastercactapus caddy-proxyprotocol plugin versions prior to 0.0.2 for Caddy Description: The issue allows remote attackers to cause a denial of service, resulting in a webserver panic and...

PT-2019-12525 · Matrix +2 · Matrix Sydent +3

Name of the Vulnerable Software and Affected Versions: Matrix Sydent versions prior to 1.0.3 Synapse versions prior to 0.99.3.1 Description: An issue was discovered that makes it easier for attackers to predict a Sydent authentication token or a Synapse random ID due to mishandled random number...

PT-2019-18422 · Adobe · Reader +1

Name of the Vulnerable Software and Affected Versions: Adobe Acrobat and Reader versions 2015.006.30482 and earlier Adobe Acrobat and Reader versions 2017.011.30127 and earlier Adobe Acrobat and Reader versions 2019.010.20098 and earlier Description: The issue is an out-of-bounds read...

PT-2019-16742 · Moodle · Moodle

Name of the Vulnerable Software and Affected Versions: Moodle versions prior to 3.6.3 Moodle versions prior to 3.5.5 Moodle versions prior to 3.4.8 Description: A vulnerability was found where permissions were not correctly checked before loading event information into the calendar's edit event...

PT-2018-3008

Name of the Vulnerable Software and Affected Versions Rack versions prior to 2.0.6 Rack versions prior to 1.6.11 Description The issue is related to a possible XSS vulnerability. Carefully crafted requests can impact the data returned by the scheme method on Rack::Request. This could lead to an X...

PT-2019-5190 · Isc +5 · Dhcpd +6

Name of the Vulnerable Software and Affected Versions: dhcpd versions prior to 4.4.1 when using BIND versions 9.11.2 or later Description: The issue is related to bugs in the ISC BIND libraries used by dhcpd when operating in DHCPv6 mode, and a bug in dhcpd itself. The bugs can cause a crash,...

PT-2017-2036 · Adobe +3 · Flash Player +3

Name of the Vulnerable Software and Affected Versions: Adobe Flash Player versions 25.0.0.148 and earlier Description: The issue is related to a memory corruption vulnerability in the BitmapData class of Adobe Flash Player. This vulnerability is caused by a buffer overflow in memory, which could...

PT-2017-17662

Name of the Vulnerable Software and Affected Versions: Siklu EtherHaul versions prior to 7.4.0 Description: The issue allows a remote attacker to execute commands and retrieve sensitive information, including usernames and plaintext passwords, from the device without requiring authentication...

PT-2017-9029 · Chicken +1 · Chicken Scheme +1

Name of the Vulnerable Software and Affected Versions: CHICKEN Scheme versions prior to 4.12 Description: The issue arises from the "process-execute" and "process-spawn" procedures in CHICKEN Scheme, which utilize fixed-size buffers to hold arguments and environment variables for the execve call...

PT-2016-2425 · Adobe +3 · Flash Player +3

Name of the Vulnerable Software and Affected Versions: Adobe Flash Player versions prior to 18.0.0.366 Adobe Flash Player versions 19.x through 22.x before 22.0.0.209 Adobe Flash Player version before 11.2.202.632 on Linux Description: The issue is related to the lack of protection for internal...

PT-2016-1784 · Mariadb +7 · Mariadb +7

Name of the Vulnerable Software and Affected Versions: Oracle MySQL versions 5.5.47 and earlier Oracle MySQL versions 5.6.28 and earlier Oracle MySQL versions 5.7.10 and earlier MariaDB versions prior to 5.5.48 MariaDB versions 10.0.x prior to 10.0.24 MariaDB versions 10.1.x prior to 10.1.12...

PT-2015-6343

Name of the Vulnerable Software and Affected Versions Ansible versions prior to 1.9.2 Description The issue concerns a failure to verify that the server hostname matches a domain name in the subject's Common Name CN or the subjectAltName field of the X.509 certificate. This allows man-in-the-midd...

PT-2014-5398 · Gnupg +3 · Gpgme +3

Name of the Vulnerable Software and Affected Versions: GPGME versions prior to 1.5.1 Description: The issue is related to multiple heap-based buffer overflows in the status handler function, specifically in the engine-gpgsm.c and engine-uiserver.c files. This can be exploited by remote attackers ...

PT-2013-1158 · Gnu +4 · Gimp-Debuginfo +5

Name of the Vulnerable Software and Affected Versions: GIMP versions 2.6.9 and earlier gimp-debuginfo version 2.2.13 Description: The issue is related to a heap-based buffer overflow in the read xwd cols function in the X Window Dump XWD plug-in, which can be exploited by remote attackers using a...

PT-2013-3193 · Oracle +1 · Mysql Server +1

Name of the Vulnerable Software and Affected Versions: Oracle MySQL versions 5.5.30 and earlier Oracle MySQL versions 5.6.10 and earlier Description: The issue affects the availability of the system, allowing remote authenticated users to impact it via unknown vectors related to InnoDB...

PT-2013-1504 · Oracle +4 · Mysql Server +4

Name of the Vulnerable Software and Affected Versions: Oracle MySQL versions 5.1.66 and earlier Oracle MySQL versions 5.5.28 and earlier Description: The issue affects the Server component in Oracle MySQL, allowing remote authenticated users to impact availability through unspecified vectors...

RHEL 5 / 6 : php (RHSA-2012:0546)

The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2012:0546 advisory. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. A flaw was found in the way the php-cgi executable processe...

PT-2011-1247 · Adobe +2 · Reader +3

Name of the Vulnerable Software and Affected Versions: Adobe Reader versions 9.x through 9.4.6 Adobe Reader and Adobe Acrobat versions 10.1.1 and earlier Description: The issue is related to a memory corruption vulnerability in the U3D component of Adobe Reader and Adobe Acrobat. This vulnerabili...

PT-2011-1181 · Tiff Package +2 · Tiff +2

Name of the Vulnerable Software and Affected Versions: LibTIFF versions prior to 3.9.5 tiff package versions prior to 4.0.2-r1 Description: The issue is related to a heap-based buffer overflow in the OJPEG decoder in LibTIFF, which can be exploited by remote attackers via a crafted TIFF file,...