PT-2020-2758 · Suse · Crowbar-Core +3

Name of the Vulnerable Software and Affected Versions: SUSE OpenStack Cloud 7 crowbar-core versions prior to 4.0+git.1578392992.fabfd186c-9.63.1 SUSE OpenStack Cloud 8 ardana-cinder versions prior to 8.0+git.1579279939.ee7da88-3.39.3 SUSE OpenStack Cloud 9 ardana-ansible versions prior to...

Intel Processor Graphics Vulnerability - Lenovo Support US

Lenovo Security Advisory: LEN-30350 Potential Impact: Information Disclosure Severity: Medium Scope of Impact: Industry-wide CVE Identifier: CVE-2019-14615 Summary Description: Intel reported a potential security vulnerability in Intel Processor Graphics software that may allow information...

GHSA-92VM-WFM5-MXVV cookie-signature Timing Attack

Affected versions of cookie-signature are vulnerable to timing attacks as a result of using a fail-early comparison instead of a constant-time comparison. Timing attacks remove the exponential increase in entropy gained from increased secret length, by providing per-character feedback on the...

PT-2020-10376 · Sqlite +6 · Sqlite +6

Name of the Vulnerable Software and Affected Versions: SQLite version 3.30.1 Description: The issue is related to the selectExpander function in the select.c file of SQLite. This function proceeds with WITH stack unwinding even after a parsing error occurs. Recommendations: For SQLite version...

PT-2019-15988 · FFmpeg · Ffjpeg

Name of the Vulnerable Software and Affected Versions: ffjpeg through 2019-08-21 Description: The issue is related to a divide-by-zero error in the jfif decode function, located in jfif.c. This error occurs in ffjpeg. Recommendations: For ffjpeg through 2019-08-21, consider updating to a version...

PT-2019-14726 · Jenkins · Jenkins Rapiddeploy Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins RapidDeploy Plugin versions 4.1 and earlier Description: A missing permission check in the plugin allows attackers with Overall/Read permission to connect to an attacker-specified web server. Recommendations: For Jenkins RapidDeploy...

PT-2019-5579 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Intel FPGA SDK for OpenCL Pro Edition versions prior to 19.4 Description: The issue is related to an improper conditions check in the Linux kernel driver, which may allow an authenticated user to potentially enable denial of service via local...

PT-2019-5864 · Imagemagick +5 · Imagemagick +5

Name of the Vulnerable Software and Affected Versions: ImageMagick versions prior to 7.0.9-0 Description: A flaw was found in ImageMagick in MagickCore/segment.c, where an attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math...

PT-2019-5866 · Imagemagick +5 · Imagemagick +5

Name of the Vulnerable Software and Affected Versions: ImageMagick versions prior to 7.0.8-68 Description: The issue is related to the PALM image coder in ImageMagick, which makes an improper call to AcquireQuantumMemory in the WritePALMImage routine due to an offset of 256. This can cause an...

PT-2019-4229 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions through 5.3.11 Description: The issue is related to a memory leak in the fsl lpspi probe function in the Linux kernel, which can cause a denial of service due to memory consumption. This can be triggered by failures in p...

PT-2019-3536 · Zingbox · Zingbox Inspector

Name of the Vulnerable Software and Affected Versions: Zingbox Inspector versions 1.293 and earlier Description: A security issue exists that allows for remote code execution if the Inspector receives a malicious command from the Zingbox cloud or is tampered with to connect to an attacker's cloud...

PT-2019-4102 · None +4 · E2Fsprogs +4

Name of the Vulnerable Software and Affected Versions: E2fsprogs version 1.45.3 Description: The issue is related to a code execution vulnerability in the quota file functionality of E2fsprogs, which can be triggered by a specially crafted ext4 partition. This can cause an out-of-bounds write on...

PT-2019-13833 · Tribulant · Tribulant Newsletters

Name of the Vulnerable Software and Affected Versions: Tribulant Newsletters plugin versions prior to 4.6.19 Description: The issue allows directory traversal with resultant remote PHP code execution. This is achieved via the subscribers11 parameter in conjunction with an exportfile=../ value in...

PT-2019-10403 · WordPress · Wp Ultimate Csv Importer

Name of the Vulnerable Software and Affected Versions: wp-ultimate-csv-importer plugin versions prior to 5.6.1 Description: The issue concerns a CSRF problem in the wp-ultimate-csv-importer plugin for WordPress. Recommendations: For versions prior to 5.6.1, update to version 5.6.1 or later to...

PT-2019-7663 · WordPress · All-In-One-Wp-Security-And-Firewall

Name of the Vulnerable Software and Affected Versions: all-in-one-wp-security-and-firewall plugin versions prior to 4.0.6 Description: The issue concerns a cross-site scripting XSS problem in the settings pages of the plugin. Recommendations: For versions prior to 4.0.6, update to version 4.0.6 o...

PT-2019-12214

Name of the Vulnerable Software and Affected Versions Kubernetes versions prior to 1.15.0 Kubernetes versions prior to 1.14.4 Kubernetes versions prior to 1.13.8 Kubernetes versions prior to 1.12.10 Description The issue concerns the exposure of the debugging endpoint "/debug/pprof" over the...

PT-2021-7396 · FFmpeg +5 · Ffmpeg +5

Name of the Vulnerable Software and Affected Versions: FFmpeg version git commit de8e6e67e7523e48bb27ac224a0b446df05e1640 Description: The issue is related to an assertion failure at src/libavutil/mathematics.c in the FFmpeg library. This can be exploited by a remote attacker to cause a denial of...

PT-2019-11759 · Jenkins · Jenkins Configuration As Code Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Configuration as Code Plugin versions 1.24 and earlier Description: The issue concerns the Jenkins Configuration as Code Plugin, which did not reliably identify sensitive values expected to be exported in their encrypted form...

PT-2019-16512 · Oracle +6 · Mysql Server +5

Name of the Vulnerable Software and Affected Versions: Oracle MySQL versions 8.0.16 and prior Description: The issue allows a low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks can result in unauthorized ability to cause a hang or...

PT-2019-18220 · F5 · F5 Big-Ip

Name of the Vulnerable Software and Affected Versions: F5 BIG-IP versions 14.0.0 through 14.0.0.4 F5 BIG-IP versions 14.1.0 through 14.1.0.5 Description: The issue arises from malformed HTTP requests made to an undisclosed iControl REST endpoint, which can cause an infinite loop of the restjavad...