PT-2021-21240 · Dell Emc · Dell Emc Scg

Name of the Vulnerable Software and Affected Versions: Dell EMC SCG versions 5.00.00.10 and earlier Description: A sensitive information disclosure issue exists, allowing a local malicious user to read sensitive information and potentially use it. Recommendations: For versions 5.00.00.10 and...

PT-2021-16333 · WordPress · Insert Pages

Name of the Vulnerable Software and Affected Versions: Insert Pages WordPress plugin versions prior to 3.7.0 Description: The issue allows users with a role as low as Contributor to access content and metadata from arbitrary posts or pages, regardless of their author and status, including private...

PT-2021-7848 · Unknown +7 · Oci Distribution Specification +7

Name of the Vulnerable Software and Affected Versions: OCI Distribution Specification versions 1.0.0 and prior Description: The issue concerns the OCI Distribution Specification, which defines an API protocol for content distribution. In versions 1.0.0 and prior, the Content-Type header alone was...

PT-2021-5595 · Wireshark +5 · Wireshark +5

Name of the Vulnerable Software and Affected Versions: Wireshark versions 3.2.0 through 3.2.17 Wireshark versions 3.4.0 through 3.4.9 Description: The issue is caused by uncontrolled recursion in the Bluetooth DHT dissector. This can be exploited by a remote attacker to cause a denial of service ...

PT-2021-7347 · Mariadb +6 · Mariadb +7

Name of the Vulnerable Software and Affected Versions: MariaDB versions prior to 10.5.9 Description: The issue is related to errors in resource release in the set var.cc component of the MariaDB database management system. Exploitation of this issue can lead to a denial of service. It is caused b...

PT-2021-16694 · Unknown · Group Sharing

Name of the Vulnerable Software and Affected Versions: Group Sharing versions prior to 10.8.03.2 Description: The issue allows an attacker to access contact information due to an intent redirection vulnerability in Group Sharing. Recommendations: For versions prior to 10.8.03.2, update to version...

PT-2021-18900 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.0.1 Description: The issue allows an attacker to write arbitrary files by unpacking a maliciously crafted archive. This is possible due to insufficient checks, which have been improved in the fixed version...

PT-2021-7210 · Mariadb +5 · Mariadb Server +5

Name of the Vulnerable Software and Affected Versions: MariaDB Server versions prior to 10.7 Description: The issue is related to the method log statement ex in the server audit/server audit.c plugin, which does not release the lock bigbuffer lock correctly. This can lead to a deadlock, allowing...

PT-2021-21388 · WordPress · Ulisting

Name of the Vulnerable Software and Affected Versions: WordPress uListing plugin versions = 2.0.5 Description: The issue is related to an Authenticated Reflected Cross-Site Scripting XSS vulnerability. Vulnerable parameters include filterid, filteruser, filterexpired date, filtercreated date, and...

PT-2021-23350 · Gradle · Gradle Enterprise

Name of the Vulnerable Software and Affected Versions: Gradle Enterprise versions prior to 2021.1.3 Description: The issue allows an attacker with the ability to perform Server-Side Request Forgery SSRF attacks to potentially discover credentials for other resources. SSRF is a type of attack wher...

PT-2021-15295 · Ubiquiti · Unifi Talk

Name of the Vulnerable Software and Affected Versions: UniFi Talk application versions 1.12.3 and earlier Description: A vulnerability in the UniFi Talk application permits a malicious actor who has already gained access to a network to control Talk devices assigned to said network if they are no...

PT-2021-16099 · WordPress · Timetable/Event Schedule

Name of the Vulnerable Software and Affected Versions: Timetable and Event Schedule WordPress plugin versions prior to 2.4.2 Description: The issue concerns a lack of proper access control and the absence of a CSRF check, allowing any user with the edit posts capability to delete arbitrary...

PT-2021-4217 · Apache +1 · Apache Shiro +1

Name of the Vulnerable Software and Affected Versions: Apache Shiro versions prior to 1.8.0 Description: The issue is related to weaknesses in the authentication mechanism of Apache Shiro. A specially crafted HTTP request may cause an authentication bypass, allowing a remote attacker to gain...

PT-2021-1392

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server versions 2.4.48 and earlier Description: A crafted request uri-path can cause mod proxy to forward the request to an origin server chosen by the remote user. This issue is related to insufficient validation of incoming...

PT-2021-7209 · Mariadb +5 · Mariadb Server +5

Name of the Vulnerable Software and Affected Versions: MariaDB Server versions prior to 10.7 Description: The issue is related to a denial of service vulnerability in the xbstream open method, located in extra/mariabackup/ds xbstream.cc. When an error occurs, specifically when stream ctxt-dest fi...

PT-2021-16032 · WordPress · Mf Gig Calendar

Name of the Vulnerable Software and Affected Versions: MF Gig Calendar WordPress plugin versions prior to 1.2 Description: The issue is related to a reflected Cross-Site Scripting problem. It occurs because the id GET parameter is not properly sanitised and escaped before being outputted back in...

PT-2021-18785 · Apple · Garageband

Name of the Vulnerable Software and Affected Versions: GarageBand versions prior to 10.4.3 Description: A local attacker may be able to read sensitive information due to this issue. The estimated number of potentially affected devices worldwide is not specified. There is no information about...

PT-2021-17591 · Johnson Controls · Ac2000

Name of the Vulnerable Software and Affected Versions: Johnson Controls CEM Systems AC2000 versions 10.1 through 10.5 Description: A remote attacker can access the system without adequate authorization due to a vulnerability. Recommendations: For versions 10.1 through 10.5, update to a version th...

PT-2021-18973 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.6.1 Description: The issue involves multiple out-of-bounds write problems that have been resolved through enhanced bounds checking. A malicious application could potentially execute arbitrary code with kernel...

PT-2021-7281 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.0.1 Description: A logic issue was addressed with improved state management, which could allow a malicious application to elevate privileges. The issue is related to insecure privilege management, potentially enabli...