PT-2023-2026

Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions 2.4.0 through 2.4.55 Description The issue is related to HTTP Request Smuggling attacks, which can occur when mod proxy is enabled along with certain RewriteRule or ProxyPassMatch configurations. These configuration...

PT-2022-22026 · WordPress · Ideastocode Enable Svg

Name of the Vulnerable Software and Affected Versions: ideasToCode Enable SVG, WebP & ICO Upload plugin version 1.0.1 and earlier Description: The issue allows authenticated users with author or higher roles to upload arbitrary files. This can be exploited by uploading malicious files to the...

PT-2022-21852 · Siemens · Opcenter Quality

Name of the Vulnerable Software and Affected Versions: Opcenter Quality versions prior to V13.1.20220624 Opcenter Quality versions prior to V13.2.20220624 Description: A vulnerability has been identified where the affected applications do not properly validate login information during...

PT-2022-17986 · Zoho · Zoho Manageengine Remote Access Plus

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine Remote Access Plus versions prior to 10.1.2137.15 Description: The issue allows guest users to view domain details, including the username and GUID of an administrator. Recommendations: For versions prior to 10.1.2137.15,...

PT-2021-8144 · Linux +6 · Linux Kernel +6

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.13.0-22-generic 22+arighi20211110 Description: The vulnerability is related to a stack out-of-bounds access in the elantech change report id function. The param array in elantech change report id must be at...

PT-2020-17337 · Envoy · Envoy

Name of the Vulnerable Software and Affected Versions: Envoy versions prior to 1.16.1 Description: The issue is related to the mishandling of dropped and truncated datagrams, which can cause a segmentation fault when a UDP packet size exceeds 1500. Recommendations: For Envoy versions prior to...

PT-2020-5011 · Adobe · Acrobat Reader For Android

Name of the Vulnerable Software and Affected Versions: Adobe Acrobat Reader for Android version 20.6.2 and earlier Description: The issue is related to inadequate access control, which could result in the disclosure of sensitive information stored in databases used by the application. Exploitatio...

Security and Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows 8.1, RT 8.1, and Server 2012 R2 (KB4499408)

Security and Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows 8.1, RT 8.1, and Server 2012 R2 KB4499408 Applies to: Microsoft .NET Framework 3.5 Microsoft .NET Framework 4.5.2 Microsoft .NET Framework 4.6 Microsoft .NET Framework 4.6.1 Microsoft...

PT-2018-3975 · Npm · Sshpk

Name of the Vulnerable Software and Affected Versions: sshpk versions prior to 1.13.2 sshpk versions prior to 1.14.1 Description: The issue is related to the parsing of crafted invalid public keys, which can lead to a regular expression denial of service. This can cause a denial of service,...

PT-2015-3438 · Apple · Os X

Name of the Vulnerable Software and Affected Versions: Apple OS X versions prior to 10.10.3 Description: The issue is related to the XPC implementation in the Admin Framework of Apple OS X, which allows local users to bypass authentication and obtain admin privileges via unspecified vectors. This...

KLA10487 Multiple vulnerabilities in IBM GPFS

Multiple serious vulnerabilities have been found in IBM GPFS. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions, execute arbitrary code and gain privileges. Below is a complete list of vulnerabilities 1. An unknown vulnerability can be...

PT-2005-5611 · Pcre +1 · Libpcre +4

Name of the Vulnerable Software and Affected Versions: PCRE library versions prior to 6.7 libpcre versions prior to 7.3-r1 pcre-32bit affected versions not specified pcre affected versions not specified pcre-devel affected versions not specified Description: The issue is related to an integer...