PT-2021-16102 · WordPress · Per Page Add To Head

Name of the Vulnerable Software and Affected Versions: Per page add to head WordPress plugin versions prior to 1.4.4 Description: The issue is related to the lack of CSRF checks when saving settings, which could allow attackers to make changes to the settings of a logged-in admin. Additionally, t...

PT-2021-5804 · Ntfs-3G +7 · Ntfs-3G +7

Name of the Vulnerable Software and Affected Versions: NTFS-3G versions prior to 2021.8.22 Description: A crafted NTFS image can trigger a heap-based buffer overflow, caused by an unsanitized attribute in ntfs get attribute value. This issue may allow an attacker to access confidential data,...

PT-2022-4773 · Mariadb +9 · Mariadb +10

Name of the Vulnerable Software and Affected Versions: MariaDB versions 10.5.13 and earlier Description: The issue is related to errors in resource release in the ha maria::extra component of MariaDB, which can cause an application crash via certain SELECT statements. This can lead to a denial of...

Intel Ethernet Linux Driver Advisory - Lenovo Support US

No description provided...

PT-2021-20596 · Sendgrid · Wordpress Sender Plugin

Name of the Vulnerable Software and Affected Versions: SendGrid WordPress plugin versions up to and including 1.11.8 Description: The issue allows authenticated users to bypass authorization and export statistics for a WordPress multi-site main site. This is possible due to a vulnerability in the...

PT-2021-21584 · Mupdf +1 · Mupdf +1

Name of the Vulnerable Software and Affected Versions: MuPDF versions prior to 1.18.2 Description: The issue arises from an out-of-bounds write in the cached color converter, which fails to properly consider the maximum key size of a hash table. This can be observed with crafted "mutool draw"...

PT-2021-20218 · Naver · Naver Toolbar

Name of the Vulnerable Software and Affected Versions: NAVER Toolbar versions prior to 4.0.30.323 Description: The issue allows remote attackers to execute arbitrary code via a crafted upgrade.xml file. Special characters in the filename parameter can bypass the code signing check function...

PT-2021-7930 · Adobe · Media Encoder

Name of the Vulnerable Software and Affected Versions: Adobe Media Encoder versions 15.2 and earlier Description: The issue is related to an out-of-bounds read that could lead to the disclosure of sensitive memory. This could allow an attacker to bypass mitigations such as ASLR. Exploitation...

PT-2021-21125 · Mediawiki +1 · Mediawiki +1

Name of the Vulnerable Software and Affected Versions: MediaWiki versions prior to 1.36 Description: An issue was discovered in the CentralAuth extension. Autoblocks for CentralAuth-issued suppression blocks are not properly implemented. Recommendations: For MediaWiki versions prior to 1.36,...

PT-2021-15399 · Gallagher · Gallagher Command Centre Server

Name of the Vulnerable Software and Affected Versions: Gallagher Command Centre Server versions prior to 8.40.1888 MR3 Gallagher Command Centre Server version 8.30 Description: The issue is related to the cleartext storage of sensitive information in memory, specifically allowing OSDP reader mast...

PT-2021-16574 · Unknown · Libsapeextractor

Name of the Vulnerable Software and Affected Versions: libsapeextractor library versions prior to SMR MAY-2021 Release 1 Description: The issue is related to improper input validation in the scmn mfal read function, which can be exploited to execute arbitrary code on the mediaextractor process...

CVE-2021-22550 Enclave memory overwrite/overread vulnerability in Asylo UntrustedCacheMalloc::GetBuffer

An attacker can modify the pointers in enclave memory to overwrite arbitrary memory addresses within the secure enclave. It is recommended to update past 0.6.3 or git commit https://github.com/google/asylo/commit/a47ef55db2337d29de19c50cd29b0deb2871d31c...

PT-2021-4274 · Libtpms · Libtpms

Name of the Vulnerable Software and Affected Versions: libtpms versions prior to 0.7.2 libtpms versions prior to 0.8.0 Description: A stack corruption bug was found in libtpms while decrypting data using RSA, which could result in a SIGBUS bad memory access and termination of swtpm. The highest...

PT-2021-20066 · Synology · Synology Diskstation Manager

Name of the Vulnerable Software and Affected Versions: Synology DiskStation Manager DSM versions prior to 6.2.4-25553 Description: The issue is related to a Path Traversal vulnerability in the PDF Viewer component. This allows remote authenticated users to read limited files. Recommendations: For...

PT-2021-3126

Name of the Vulnerable Software and Affected Versions nginx versions 1.20.0 Description A security issue in the nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause a 1-byte memory overwrite, resulting in a worker process crash...

PT-2021-3989 · WordPress · Rsvpmaker

Name of the Vulnerable Software and Affected Versions: RSVPMaker WordPress plugin versions prior to 8.7.3 Description: The issue is related to the Import feature of the RSVPMaker WordPress plugin, specifically with the "/wp-admin/tools.php?page=rsvpmaker export screen" endpoint. It is caused by...

PT-2021-3113 · Moodle +1 · Moodle +1

Name of the Vulnerable Software and Affected Versions: Moodle versions 3.5 to 3.5.17 Moodle versions 3.8 to 3.8.8 Moodle versions 3.9 to 3.9.6 Moodle versions 3.10 to 3.10.3 Description: The issue exists due to insufficient input validation in the virtual learning environment. This allows a remot...

PT-2022-4774 · Mariadb +9 · Mariadb +10

Name of the Vulnerable Software and Affected Versions: MariaDB versions 10.5.9 and earlier Description: The issue is related to incorrect used tables expectations in the sql parse.cc component of MariaDB, which can cause an application crash. This can be exploited to disrupt service...

PT-2021-16858 · Safe-Obj · Safe-Obj

Name of the Vulnerable Software and Affected Versions: safe-obj versions 1.0.0 through 1.0.2 Description: The issue allows an attacker to cause a denial of service and may lead to remote code execution due to a prototype pollution vulnerability. Recommendations: For versions 1.0.0 through 1.0.2,...

PT-2021-2769 · Oracle +2 · Virtualbox +2

Name of the Vulnerable Software and Affected Versions: Oracle VM VirtualBox versions prior to 6.1.20 Description: The issue is related to insufficient input validation in the Core component of Oracle VM VirtualBox, allowing a high-privileged attacker with logon to the infrastructure to compromise...