PT-2021-7681 · Adobe · Dimension

Name of the Vulnerable Software and Affected Versions: Adobe Dimension version 3.4.5 Description: The issue is related to a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction, where a...

CVE-2021-39199

remark-html is an open source nodejs library which compiles Markdown to HTML. In affected versions the documentation of remark-html has mentioned that it was safe by default. In practice the default was never safe and had to be opted into. That is, user input was not sanitized. This means arbitra...

PT-2021-3940 · Adobe · Character Animator

Name of the Vulnerable Software and Affected Versions: Adobe Character Animator versions 4.2 and earlier Description: The issue is caused by a memory corruption vulnerability when parsing a specially crafted file, allowing an unauthenticated attacker to achieve arbitrary code execution in the...

PT-2021-20839 · Zimbra · Zimbra Web Client +1

Name of the Vulnerable Software and Affected Versions: Zimbra Collaboration Suite versions 8.8.0 through 8.8.15 Patch 22 Zimbra Collaboration Suite versions 9.0.0 through 9.0.0 Patch 15 Description: A security issue exists in the login component of Zimbra Web Client, where an attacker can execute...

PT-2021-9833 · Siemens · Sinamics Sl150 +6

Name of the Vulnerable Software and Affected Versions: SIMATIC HMI Comfort Panels incl. SIPLUS variants versions prior to V16 Update 3a SIMATIC HMI KTP Mobile Panels versions prior to V16 Update 3a SINAMICS GH150 all versions SINAMICS GL150 with option X30 all versions SINAMICS GM150 with option...

PT-2021-1856 · Oracle · Oracle Weblogic Server

Name of the Vulnerable Software and Affected Versions: Oracle WebLogic Server versions 10.3.6.0.0 through 12.1.3.0.0 Description: The issue is related to insufficient access control in the Web Services component of Oracle WebLogic Server, allowing an unauthenticated attacker with network access v...

PT-2021-11867 · WordPress · Newsletters

Name of the Vulnerable Software and Affected Versions: Newsletter plugin versions prior to 6.8.2 for WordPress Description: A Reflected Authenticated Cross-Site Scripting XSS issue allows remote attackers to trick a victim into submitting a tnpc render AJAX request. This request can contain eithe...

CVE-2020-16916

An elevation of privilege vulnerability exists when Windows improperly handles COM object creation. An attacker who successfully exploited the vulnerability could run arbitrary code with elevated privileges. To exploit this vulnerability, an attacker would first have to log on to the system. An...

CVE-2020-1097

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise a user’s system. There are multiple ways an attacker could exploit...

SUSE-SU-2020:1918-1 Security update for xrdp

This update for xrdp fixes the following issues: - Security fixes bsc1173580, CVE-2020-4044: + Add patches: xrdp-cve-2020-4044-fix-0.patch xrdp-cve-2020-4044-fix-1.patch + Rebase SLE patch: xrdp-fate318398-change-expired-password.patch...

CVE-2019-20869

An issue was discovered in Mattermost Server before 5.10.0, 5.9.1, 5.8.2, and 4.10.9. A non-member could change the Update/Patch Channel endpoint for a private channel...

CVE-2019-20869: Undefined Security Weakness

An issue was discovered in Mattermost Server before 5.10.0, 5.9.1, 5.8.2, and 4.10.9. A non-member could change the Update/Patch Channel endpoint for a private channel...

libexif security update

0.6.21-6 - Add patch for CVE-2020-13112 - Resolves: 1840948...

Exploit for Double Free in Whatsapp

WhatsPayloadRCE This is a Automated Generate Payload for CVE-...

BlueZ Advisory

Summary: A potential security vulnerability in BlueZ may allow escalation of privilege and denial of service. BlueZ is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2020-0556 Description: Improper access control in subsystem for BlueZ befor...

Security update for nmap (important)

openSUSE Security Update: Security update for nmap Announcement ID: openSUSE-SU-2019:2198-1 Rating: important References: 1135350 1148742 Cross-References: CVE-2017-18594 CVE-2018-15173 Affected Products: openSUSE Leap 15.0 An update that fixes two vulnerabilities is now available. Description:...

Protect against BlueKeep

Worms are the cause of many cyber headaches. They can easily replicate themselves to spread malicious malware to other computers in your network. As the field responders providing Microsoft enterprise customers with onsite assistance to serious cybersecurity threats, our Detection and Response Te...

PT-2022-23251 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: GPAC versions prior to the version that includes commit fef6242 Description: A heap-buffer-overflow occurred in the gf isom dovi config get function of isomedia/avc ext.c at line 2490, as demonstrated by MP4Box. Recommendations: For versions...

PT-2018-3329

Name of the Vulnerable Software and Affected Versions: Adobe Flash Player versions 31.0.0.153 and earlier Adobe Flash Player versions 31.0.0.108 and earlier Description: The issue is related to a use-after-free vulnerability in Adobe Flash Player. Successful exploitation could lead to arbitrary...

PT-2018-4910

Name of the Vulnerable Software and Affected Versions web2py versions prior to 2.14.2 Description The issue allows remote attackers to obtain the session cookie key value via a direct request to "examples/simple examples/status". This can be leveraged to execute arbitrary code. Recommendations Fo...