PT-2021-16590 · Unknown · Smart Manager

Name of the Vulnerable Software and Affected Versions: Smart Manager versions prior to 11.0.05.0 Description: The issue is related to an improper configuration in Smart Manager, which allows an attacker to access a file with system privilege. Recommendations: For versions prior to 11.0.05.0, upda...

PT-2021-16578 · Unknown · Libsflacextractor

Name of the Vulnerable Software and Affected Versions: libsflacextractor library prior to SMR MAY-2021 Release 1 Description: The issue is related to an improper input validation vulnerability in the sflacfd get frm function. This vulnerability allows attackers to execute arbitrary code on the...

PT-2021-15269

Name of the Vulnerable Software and Affected Versions Nextcloud iOS versions prior to 3.4.2 Description The issue arises when searches for sharees utilize the lookup server by default, instead of only on the local Nextcloud server, unless a global search has been explicitly chosen by the user. Th...

PT-2021-7538 · Wibu Systems · Codemeter

Name of the Vulnerable Software and Affected Versions: Wibu-Systems CodeMeter versions prior to 7.21a Description: A buffer over-read issue exists, allowing an unauthenticated remote attacker to disclose heap memory contents or crash the CodeMeter Runtime Server. The vulnerability can be exploite...

PT-2021-14705 · Xebialabs +1 · Jenkins Xebialabs Xl Deploy Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins XebiaLabs XL Deploy Plugin versions 10.0.1 and earlier Description: A missing permission check in the plugin allows attackers with Overall/Read permission to enumerate credentials ID of credentials stored in Jenkins. This issue is...

PT-2024-11254 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.13.0-rc3+ Description: The vulnerability is a use-after-free issue in the mlx5e encap take function, which can be triggered by concurrent encap entry insertion/deletion. This can lead to a use-after-free error...

CVE-2021-22550

An attacker can modify the pointers in enclave memory to overwrite arbitrary memory addresses within the secure enclave. It is recommended to update past 0.6.3 or git commit https://github.com/google/asylo/commit/a47ef55db2337d29de19c50cd29b0deb2871d31c...

Design/Logic Flaw

An attacker can modify the pointers in enclave memory to overwrite arbitrary memory addresses within the secure enclave. It is recommended to update past 0.6.3 or git commit https://github.com/google/asylo/commit/a47ef55db2337d29de19c50cd29b0deb2871d31c...

PT-2021-3362

Name of the Vulnerable Software and Affected Versions Polkit versions prior to 0.119 Description It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user. This flaw could be used by an unprivilege...

PT-2021-18077 · Synology · Synology Diskstation Manager

Name of the Vulnerable Software and Affected Versions: Synology DiskStation Manager DSM versions prior to 6.2.4-25553 Description: The issue is related to improper limitation of a pathname to a restricted directory, also known as 'Path Traversal', in the cgi component. This allows local users to...

PT-2021-3341 · 3S Smart Software Solutions · Codesys V2 Web-Server

Name of the Vulnerable Software and Affected Versions: CODESYS V2 Web-Server versions prior to 1.1.9.20 Description: The issue is related to an improperly implemented security check in the CODESYS V2 Web-Server, which is associated with inadequate access control. This can allow a remote attacker ...

PT-2022-4797 · Mariadb +9 · Mariadb +10

Name of the Vulnerable Software and Affected Versions: MariaDB versions 10.5.9 and earlier Description: The issue is related to errors in pointer handling, which can cause an application crash when a NULL value is encountered in the aggr variable within the sub select postjoin aggr function. This...

PT-2021-3670 · Xstream +5 · Xstream +5

Name of the Vulnerable Software and Affected Versions: XStream versions prior to 1.4.17 Description: A vulnerability in XStream may allow a remote attacker with sufficient rights to execute commands of the host by manipulating the processed input stream. The issue is related to shortcomings in th...

PT-2022-1774 · Mariadb +10 · Mariadb +11

Name of the Vulnerable Software and Affected Versions: MariaDB versions prior to 10.7.2 Description: The issue is related to incorrect management of internal resources in MariaDB, specifically with the SELECT LEX::nest level component. This can lead to an application crash because MariaDB does no...

PT-2021-19198 · Apache · Apache Unomi

Name of the Vulnerable Software and Affected Versions: Apache Unomi versions prior to 1.5.5 Description: The issue is related to CRLF log injection due to the lack of escaping in log statements. Recommendations: For versions prior to 1.5.5, update to version 1.5.5 or later to resolve the issue...

PT-2021-7968 · Jquery-Ui +5 · Jquery Ui +5

Name of the Vulnerable Software and Affected Versions: jQuery UI versions prior to 1.13.0 Description: The issue is related to the .position util in jQuery UI, where accepting the value of the of option from untrusted sources may execute untrusted code. This can be exploited by an attacker to...

PT-2021-12640 · Avaya · Avaya Equinox Conferencing

Name of the Vulnerable Software and Affected Versions: Avaya Equinox Conferencing Management component versions 3.x before 3.17 Description: A vulnerability was discovered in the Management component of Avaya Equinox Conferencing that could potentially allow an unauthenticated, remote attacker to...

PT-2021-18233 · Unknown · Discord-Recon

Name of the Vulnerable Software and Affected Versions: Discord-Recon versions 0.0.3 and prior Description: The issue allows a remote attacker to overwrite any file on the system with command results, potentially leading to remote code execution if important system files are overwritten...

PT-2021-10985 · Fast Ber · Fast Ber

Name of the Vulnerable Software and Affected Versions: fast ber versions prior to v0.5 Description: An issue was discovered in the yy::yylex function located in asn compiler.hpp, which has a heap-based buffer over-read. Recommendations: For versions prior to v0.5, update to version v0.5 or later ...

PT-2021-20586 · Lenovo · Lenovo Power Management Driver

Name of the Vulnerable Software and Affected Versions: Lenovo Power Management Driver for Windows 10 versions prior to 1.67.17.54 Description: A privilege escalation issue could allow unauthorized access to the driver's device object. Recommendations: For versions prior to 1.67.17.54, update to...