PT-2020-14789 · Temi · Temi Robox Os +1

Name of the Vulnerable Software and Affected Versions: temi Robox OS versions prior to 120 temi Android app versions up to 1.3.7931 Description: The issue allows remote attackers to access the REST API and MQTT broker used by the temi and send it custom data/requests. Recommendations: For temi...

PT-2020-20701 · Apache · Apache Guacamole

Name of the Vulnerable Software and Affected Versions: Apache Guacamole versions 1.1.0 and older Description: The issue arises from improper validation of data received from RDP servers via static virtual channels. If a user connects to a malicious or compromised RDP server, specially-crafted PDU...

PT-2020-6383 · F5 · Big-Ip

Name of the Vulnerable Software and Affected Versions: F5 BIG-IP versions 12.1.0 through 12.1.5.1 F5 BIG-IP versions 13.1.0 through 13.1.3.3 F5 BIG-IP versions 14.1.0 through 14.1.2.5 F5 BIG-IP versions 15.0.0 through 15.1.0.3 Description: The issue is related to a lack of protection for the web...

PT-2020-4416 · Fasterxml +3 · Jackson-Databind +3

Name of the Vulnerable Software and Affected Versions: FasterXML jackson-databind versions 2.x before 2.9.10.5 Description: The issue is related to the interaction between serialization gadgets and typing in the jackson-databind library, specifically with the...

PT-2020-13541 · FFmpeg · Ffjpeg

Name of the Vulnerable Software and Affected Versions: ffjpeg versions prior to 2020-02-24 Description: The issue is related to a heap-based buffer over-read in the jfif decode function located in jfif.c. This indicates a problem with how the software handles certain data, potentially leading to...

PT-2020-10773 · Gila · Gila Cms

Name of the Vulnerable Software and Affected Versions: Gila CMS versions prior to 1.11.6 Description: The issue is related to reflected XSS, which occurs via the id parameter in the admin/content/postcategory endpoint. This parameter is mishandled when g preview theme is used. Recommendations: Fo...

PT-2020-6500 · Ibm · Ibm Data Risk Manager

Name of the Vulnerable Software and Affected Versions: IBM Data Risk Manager versions 2.0.1 through 2.0.4 Description: The issue is related to the failure to neutralize special elements used in operating system commands, which can be exploited by a remote attacker to execute arbitrary commands on...

PT-2020-12906 · Ecma +2 · Libemf +2

Name of the Vulnerable Software and Affected Versions: libEMF aka ECMA-234 Metafile Library versions through 1.0.11 Description: The issue allows a use-after-free, which is a type of memory corruption bug that can lead to unexpected behavior or crashes. Recommendations: For libEMF aka ECMA-234...

PT-2020-12653 · Gitlab · Gitlab

Name of the Vulnerable Software and Affected Versions: GitLab versions 10.7.0 through 12.9.2 Description: An issue in GitLab allows a Workhorse bypass, which could lead to job artifact uploads and file disclosure, resulting in the exposure of sensitive information via request smuggling...

PT-2020-20314 · Canonical · Apport +1

Name of the Vulnerable Software and Affected Versions: Apport versions prior to 2.20.1-0ubuntu2.23 Apport versions prior to 2.20.9-0ubuntu7.14 Apport versions prior to 2.20.11-0ubuntu8.8 Apport versions prior to 2.20.11-0ubuntu22 Description: A Time-of-check Time-of-use Race Condition issue exist...

PT-2020-5054 · Cloudbees +1 · Jenkins

Name of the Vulnerable Software and Affected Versions: Jenkins versions 2.227 and earlier Jenkins LTS versions 2.204.5 and earlier Description: The issue arises from the improper escaping of node labels shown in the form validation for label expressions on job configuration pages, resulting in a...

PT-2020-6203 · Graphicsmagick +4 · Graphicsmagick +4

Name of the Vulnerable Software and Affected Versions: GraphicsMagick versions prior to 1.3.32 Description: The issue is related to information disclosure, allowing remote attackers to read arbitrary files via a crafted image because of the TranslateTextEx function for SVG. This can lead to...

PT-2020-11999 · Open Source Matters · Joomla!

Name of the Vulnerable Software and Affected Versions: Joomla! versions prior to 3.9.16 Description: The issue is related to a SQL injection vulnerability due to the lack of type casting of a variable in a SQL statement. This vulnerability affects the Featured Articles frontend menutype...

PT-2020-15344 · Jenkins · Jenkins Script Security Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Script Security Plugin versions 1.70 and earlier Description: The sandbox protection in the Jenkins Script Security Plugin could be circumvented through crafted method calls on objects that implement GroovyInterceptable, or through...

PT-2020-15370 · Jenkins · Jenkins Backlog Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Backlog Plugin versions 2.4 and earlier Description: The issue concerns the transmission of configured credentials in plain text as part of job configuration forms, potentially resulting in their exposure. Credentials are stored...

PT-2020-20637 · Ibl · Ibl Online Weather

Name of the Vulnerable Software and Affected Versions: IBL Online Weather versions prior to 4.3.5a Description: The issue allows unauthenticated reflected XSS via the redirect page. This can lead to malicious script execution without proper authentication. Recommendations: For versions prior to...

PT-2020-20354 · Misp · Misp

Name of the Vulnerable Software and Affected Versions: MISP versions prior to 2.4.121 Description: An issue was discovered in the Galaxy view, where an incorrectly sanitized search string was found in app/View/Galaxies/view.ctp. Recommendations: For versions prior to 2.4.121, update to version...

PT-2020-6983 · Glib +8 · Glib +8

Name of the Vulnerable Software and Affected Versions: glib versions prior to 2.63.6 Description: A flaw was found in glib due to random charset alias, which can cause pkexec to leak content from files owned by privileged users to unprivileged ones under the right condition. This issue is related...

PT-2021-4230 · Linux +7 · Linux Kernel +7

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.4.92 Description: The issue is related to the disclosure of protected information in the Linux kernel, specifically in the BPF protocol. It allows an attacker with a local account to leak information about...

PT-2020-19887 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab EE version 12.2 Description: The issue concerns insecure permissions in GitLab EE. Recommendations: For GitLab EE version 12.2, update to a version that addresses the insecure permissions issue...