PT-2013-3799 · Oracle +4 · Oracle Java Se +6

Name of the Vulnerable Software and Affected Versions: Oracle Java SE versions 7 Update 21 and earlier Oracle Java SE versions 6 Update 45 and earlier Oracle Java SE versions 5.0 Update 45 and earlier OpenJDK 7 Description: The issue affects confidentiality, integrity, and availability via unknow...

PT-2013-1185 · None +3 · Libtirpc-Debuginfo +5

Name of the Vulnerable Software and Affected Versions: libtirpc versions 0.2.1 through 0.2.3 libtirpc-devel versions 0.2.1 libtirpc-debuginfo versions 0.2.1 Description: The issue allows remote attackers to cause a denial of service, potentially leading to disruption of protected information. Thi...

PT-2013-1873 · Cloudbees +1 · Jenkins

Name of the Vulnerable Software and Affected Versions: Jenkins versions prior to 1.491 Jenkins LTS versions prior to 1.480.1 Jenkins Enterprise versions 1.424.x prior to 1.424.6.13 Jenkins Enterprise versions 1.447.x prior to 1.447.4.1 Jenkins Enterprise versions 1.466.x prior to 1.466.10.1...

PT-2013-1820 · Red Hat · Red Hat Openshift Origin

Name of the Vulnerable Software and Affected Versions: Red Hat OpenShift Origin versions prior to 1.0.5-3 Description: The issue allows remote attackers to execute arbitrary commands via a crafted uuid in the PATH INFO. Recommendations: For versions prior to 1.0.5-3, update to version 1.0.5-3 or...

PT-2012-4698 · Linux +2 · Linux Diskquota +2

Name of the Vulnerable Software and Affected Versions: Linux DiskQuota aka quota versions prior to 3.17 Description: The issue concerns the good client function in rquotad, which might allow remote attackers to bypass TCP Wrappers rules in hosts.deny. This occurs because the hosts ctl function is...

PT-2012-3486 · Oracle +3 · Mysql Server +3

Name of the Vulnerable Software and Affected Versions: Oracle MySQL Server versions 5.1.62 and earlier Oracle MySQL Server versions 5.5.23 and earlier Description: The issue affects the availability of the system, related to the Server Optimizer component. It can be exploited by remote...

glucose 2 vulnerable to arbitrary script execution

Overview glucose 2 is vulnerable to arbitrary script execution. glucose 2 is an RSS reader. glucose 2 is vulnerable to arbitrary script execution which is inserted in RSS feed, due to the improper processing of RSS feed output. Daiki Fukumori of Cyber Defense Institute, Inc. reported this...

PT-2011-4733 · Unknown · Antisnews Theme

Name of the Vulnerable Software and Affected Versions: Antisnews theme versions prior to 1.10 Description: A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the s parameter. This can lead to the execution of malicious code on the client-side...

PT-2011-1122 · Red Hat · Util-Linux +2

Name of the Vulnerable Software and Affected Versions: fuse versions 2.8.3 through 2.8.5 fuse-devel version 2.8.3 fuse-libs version 2.8.3 fuse-debuginfo version 2.8.3 Description: The issue concerns multiple vulnerabilities in the fuse package of Red Hat Enterprise Linux, which can be exploited...

Microsoft MSXML vulnerability in HTTP request processing

Overview MSXML provided by Microsoft contains a vulnerability in the processing of HTTP requests. MSXML provided by Microsoft contains a vulnerability where HTTP requests for XMLHTTP objects are not processed properly. As a result, when going through a proxy server, information may be sent to...

PT-2011-1485 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.37 Description: The issue allows local users to cause a denial of service due to memory consumption via a crafted exec system call. This is related to the handling of stack memory by arrays representing...

PT-2011-1635 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliances ASA 5500 series devices versions prior to 8.23 Description: The issue allows remote authenticated users to bypass intended access restrictions via CIFS requests, even when CIFS file browsing has been disable...

PT-2010-4059 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.34 Description: The issue is related to the L2TP implementation in the Linux kernel, specifically the pppol2tp xmit function in drivers/net/pppol2tp.c. It does not properly validate certain values associated...

PT-2010-3305 · Cacti · Cacti

Name of the Vulnerable Software and Affected Versions: Cacti versions prior to 0.8.7f Description: The issue allows remote attackers to inject arbitrary web script or HTML via specific parameters to certain PHP files. The vulnerable parameters include hostname and description in host.php, as well...

PT-2009-6117 · None · Libexif

Name of the Vulnerable Software and Affected Versions: libexif version 0.6.18 Description: The issue is related to a heap-based buffer overflow in the exif entry fix function, which can be triggered by an invalid EXIF image. This could lead to a denial of service or potentially allow the executio...

PT-2009-40: JIRA sensitive information disclosure

JIRA lets you prioritise, assign, track, report and audit your 'issues,' whatever they may be — from software bugs and help-desk tickets to project tasks and change requests. Vulnerability Description Positive Technologies Research Team has discovered a sensitive information disclosure...

PT-2009-29: Tribiq CMS Multiple Vulnerabilities

Tribiq CMS is a content management system CMS software, usually implemented as a Web application, for creating and managing HTML content. It is used to manage and control a large, dynamic collection of Web material HTML documents and their associated images. Vulnerability Description Positive...

Microsoft Security Bulletin MS08-021 – Critical Vulnerabilities in GDI Could Allow Remote Code Execution (948590)

Microsoft Security Bulletin MS08-021 – Critical Vulnerabilities in GDI Could Allow Remote Code Execution 948590 Published: April 8, 2008 Version: 1.0 General Information Executive Summary This security update resolves two privately reported vulnerabilities in GDI. Exploitation of either of these...

PT-2008-2501 · Ibm +1 · Capp-Lspp-Config +2

Name of the Vulnerable Software and Affected Versions: capp-lspp-eal4-config-hp versions prior to 0.65-2 capp-lspp-config in lspp-eal4-config-ibm versions prior to 0.65-2 Description: The issue arises from the Replace function in the capp-lspp-config script, which uses lstat instead of stat to...

PT-2008-1124 · Gentoo Linux · Am-Utils

Name of the Vulnerable Software and Affected Versions: am-utils versions prior to 6.1.5 Description: The issue affects the am-utils package in Gentoo Linux and potentially other distributions, allowing local users to exploit it and compromise the confidentiality, integrity, and availability of...