PT-2020-12895 · Micro Focus · Hp Universal Cmdb +6

Name of the Vulnerable Software and Affected Versions: Operation Bridge Manager versions 2020.05, 2019.11, 2019.05, 2018.11, 2018.05, 10.6x, 10.1x and older versions Application Performance Management versions 9.51, 9.50, 9.40 with uCMDB 10.33 CUP 3 Data Center Automation version 2019.11 Operatio...

PT-2020-6180 · FFmpeg +5 · Ffmpeg +5

Name of the Vulnerable Software and Affected Versions: FFmpeg version 4.3.1 Description: The issue is related to the decode frame function in the libavcodec/exr.c component, which has an out-of-bounds write due to errors in calculations. This can be exploited by a remote attacker to cause a denia...

PT-2020-14887 · Juniper Networks · Junos Evolved

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS Evolved versions prior to 20.1R2-EVO Description: The issue occurs when parsing a specifically malformed NDP packet sent from the local area network to a device running Juniper Networks Junos OS Evolved, causing the...

openMAINT 1.1-2.4.2 - Arbitrary File Upload

Exploit Title: openMAINT 1.1-2.4.2 - Arbitrary File Upload Dork: N/A Date: 2020-08-19 Exploit Author: mrb3n Vendor Homepage: https://www.openmaint.org/en Software Link: https://sourceforge.net/projects/openmaint/files/1.1/openmaint-1.1-2.4.2.zip/download Version: 1.1-2.4.2 Category: Webapps Teste...

PT-2020-17528 · Rust · Ws

Name of the Vulnerable Software and Affected Versions: ws crate versions prior to 2020-09-25 Description: An issue in the ws crate allows a remote memory-consumption attack due to the outgoing buffer not being properly limited. This enables a remote attacker to take down the process by growing th...

PT-2020-16022 · Yworks · Yed Desktop

Name of the Vulnerable Software and Affected Versions: yWorks yEd Desktop versions prior to 3.20.1 Description: The issue allows XXE attacks via an XML or GraphML document. Recommendations: For versions prior to 3.20.1, update to version 3.20.1 or later to resolve the issue...

The `size` option isn't honored after following a redirect in node-fetch

Impact Node Fetch did not honor the size option after following a redirect, which means that when a content size was over the limit, a FetchError would never get thrown and the process would end without failure. For most people, this fix will have a little or no impact. However, if you are relyin...

PT-2020-11886 · Unknown · License Management Utility

Name of the Vulnerable Software and Affected Versions: License Management Utility LMU versions prior to V2.4 Description: A security issue has been identified where the lmgrd service of the affected application runs with local SYSTEM privileges on the server, and its configuration can be modified...

PT-2020-16216

Name of the Vulnerable Software and Affected Versions sized-chunks crate versions through 0.6.2 Description An issue in the sized-chunks crate for Rust can lead to memory-safety problems. Specifically, in the Chunk implementation, the array size is not checked when constructed with unit, pair, or...

PT-2020-15741

Name of the Vulnerable Software and Affected Versions voidtools Everything versions prior to 1.4.1 Beta Nightly 2020-08-18 Description The issue allows privilege escalation via a Trojan horse urlmon.dll file in the installation directory. This is only relevant if low-privileged users can write to...

PT-2020-5563 · Artifex +7 · Ghostscript +7

Name of the Vulnerable Software and Affected Versions: Artifex Software GhostScript versions 9.50 Description: The issue is related to a buffer overflow in the lprn is black function, located in contrib/lips4/gdevlprn.c, which can be exploited by a remote attacker to cause a denial of service. Th...

PT-2020-6943 · Redmine · Redmine

Name of the Vulnerable Software and Affected Versions: Redmine versions prior to 4.0.8 Redmine versions 4.1.x prior to 4.1.2 Description: The issue is related to permission handling errors in the Redmine project and task management web application. Exploitation of this issue allows a remote...

PT-2020-14789 · Temi · Temi Robox Os +1

Name of the Vulnerable Software and Affected Versions: temi Robox OS versions prior to 120 temi Android app versions up to 1.3.7931 Description: The issue allows remote attackers to access the REST API and MQTT broker used by the temi and send it custom data/requests. Recommendations: For temi...

PT-2020-20701 · Apache · Apache Guacamole

Name of the Vulnerable Software and Affected Versions: Apache Guacamole versions 1.1.0 and older Description: The issue arises from improper validation of data received from RDP servers via static virtual channels. If a user connects to a malicious or compromised RDP server, specially-crafted PDU...

PT-2020-6383 · F5 · Big-Ip

Name of the Vulnerable Software and Affected Versions: F5 BIG-IP versions 12.1.0 through 12.1.5.1 F5 BIG-IP versions 13.1.0 through 13.1.3.3 F5 BIG-IP versions 14.1.0 through 14.1.2.5 F5 BIG-IP versions 15.0.0 through 15.1.0.3 Description: The issue is related to a lack of protection for the web...

PT-2020-4416 · Fasterxml +3 · Jackson-Databind +3

Name of the Vulnerable Software and Affected Versions: FasterXML jackson-databind versions 2.x before 2.9.10.5 Description: The issue is related to the interaction between serialization gadgets and typing in the jackson-databind library, specifically with the...

PT-2020-13541 · FFmpeg · Ffjpeg

Name of the Vulnerable Software and Affected Versions: ffjpeg versions prior to 2020-02-24 Description: The issue is related to a heap-based buffer over-read in the jfif decode function located in jfif.c. This indicates a problem with how the software handles certain data, potentially leading to...

PT-2020-10773 · Gila · Gila Cms

Name of the Vulnerable Software and Affected Versions: Gila CMS versions prior to 1.11.6 Description: The issue is related to reflected XSS, which occurs via the id parameter in the admin/content/postcategory endpoint. This parameter is mishandled when g preview theme is used. Recommendations: Fo...

PT-2020-6500 · Ibm · Ibm Data Risk Manager

Name of the Vulnerable Software and Affected Versions: IBM Data Risk Manager versions 2.0.1 through 2.0.4 Description: The issue is related to the failure to neutralize special elements used in operating system commands, which can be exploited by a remote attacker to execute arbitrary commands on...

PT-2020-12906 · Ecma +2 · Libemf +2

Name of the Vulnerable Software and Affected Versions: libEMF aka ECMA-234 Metafile Library versions through 1.0.11 Description: The issue allows a use-after-free, which is a type of memory corruption bug that can lead to unexpected behavior or crashes. Recommendations: For libEMF aka ECMA-234...