PT-2022-2644 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to 5.4.189 Description: The issue is related to an integer overflow in the io uring interface of the Linux Kernel, which can be exploited by a local attacker to cause memory corruption and escalate privileges to th...

PT-2021-16571 · Samsung · Bixby

Name of the Vulnerable Software and Affected Versions: Bixby versions prior to 3.0.53.02 Description: The issue arises from improper handling of exceptional conditions, allowing an attacker to execute actions registered by the user. Recommendations: For versions prior to 3.0.53.02, update to...

PT-2021-16569 · Samsung · Smartthings

Name of the Vulnerable Software and Affected Versions: SmartThings versions prior to 1.7.63.6 Description: The issue is related to improper access control of certain ports, which allows for remote temporary denial of service. Recommendations: For versions prior to 1.7.63.6, update to version...

PT-2021-18383 · Pomerium · Pomerium

Name of the Vulnerable Software and Affected Versions: Pomerium versions prior to 0.13.4 Description: The issue allows an outside attacker to get a signed login URL that, upon visiting it, will redirect a victim to the attacker’s site, creating an Open Redirect problem and potentially leading to...

PT-2021-14494 · Npm · Node-Etsy-Client

Name of the Vulnerable Software and Affected Versions: node-etsy-client versions prior to 0.3.0 Description: The issue affects applications using node-etsy-client, where client error reports to end users may inadvertently expose API key values. Recommendations: For versions prior to 0.3.0, update...

PT-2021-18200 · Gitjacker · Gitjacker

Name of the Vulnerable Software and Affected Versions: gitjacker versions prior to 0.1.0 Description: The issue allows remote attackers to execute arbitrary code via a crafted .git directory because of directory traversal. This enables attackers to potentially gain control over the system...

PT-2021-6993 · Red Hat +2 · Resteasy +2

Name of the Vulnerable Software and Affected Versions: RESTEasy versions up to 4.6.0.Final Description: A flaw was found in RESTEasy where the endpoint class and method names are returned as part of the exception response when RESTEasy cannot convert one of the request URI path or query values to...

PT-2021-18086 · Esri · Arcgis Desktop +3

Name of the Vulnerable Software and Affected Versions: Esri ArcReader versions 10.8.1 and earlier ArcGIS Desktop versions 10.8.1 and earlier ArcGIS Engine versions 10.8.1 and earlier ArcGIS Pro versions 2.7 and earlier Description: The issue arises from multiple uninitialized pointer...

PT-2021-16542 · Unknown · Slow Motion Editor

Name of the Vulnerable Software and Affected Versions: Slow Motion Editor versions prior to 3.5.18.5 Description: The issue allows local attackers to perform unauthorized actions without permission by hijacking the PendingIntent in the Slow Motion Editor. This is due to the use of an unsafe...

PT-2021-4238 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.12.0-rc4 Description: An out-of-bounds memory access flaw was found in the f2fs module of the Linux kernel. This flaw is due to a bounds check failure, allowing a local attacker to access out-of-bounds memory...

PT-2021-17648 · Mybb · Mybb

Name of the Vulnerable Software and Affected Versions: MyBB versions prior to 1.8.26 Description: The issue is related to a Cross-site Scripting XSS vulnerability. It occurs when parsing messages, specifically via Nested Auto URL. This vulnerability can be exploited to execute malicious scripts o...

PT-2021-2424 · Pupnp +2 · Pupnp +2

Name of the Vulnerable Software and Affected Versions: pupnp versions prior to 1.14.5 Description: A stack overflow in the Parser parseDocument function can cause a denial of service. The ixmlNode free function will release a child node recursively, consuming stack space and leading to a crash...

PT-2021-4113 · Libyang +2 · Libyang +2

Name of the Vulnerable Software and Affected Versions: libyang versions prior to 1.0.226 Description: The issue is related to the function read yin leaf in the libyang library, which fails to check if the value of retval-extr is NULL. This can lead to a crash when attempting to access...

PT-2021-16531 · Samsung · Samsung Mobile Devices

Name of the Vulnerable Software and Affected Versions: Samsung mobile devices prior to SMR Mar-2021 Release 1 Description: The issue is related to improper memory access control in RKP, allowing an attacker with a compromised kernel to write to certain parts of the RKP EL2 memory region...

PT-2021-16533 · Samsung · Samsung Keyboard

Name of the Vulnerable Software and Affected Versions: Samsung keyboard version prior to SMR Feb-2021 Release 1 Description: The issue is related to improper access control, allowing physically proximate attackers to change arbitrary settings during the Initialization State. Recommendations: For...

PT-2021-14381 · Synapse +1 · Synapse +1

Name of the Vulnerable Software and Affected Versions: Synapse versions prior to 1.25.0 Description: A malicious homeserver could redirect requests to their .well-known file to a large file, leading to a denial of service attack where homeservers consume significantly more resources when requesti...

PT-2021-2129

Name of the Vulnerable Software and Affected Versions: VMware ESXi versions 6.5 before ESXi650-202102101-SG VMware ESXi versions 6.7 before ESXi670-202102401-SG VMware ESXi versions 7.0 before ESXi70U1c-17325551 Description: VMware ESXi’s OpenSLP service contains a heap-overflow vulnerability. An...

PT-2021-7627 · Sinatra +7 · Sinatra +7

Name of the Vulnerable Software and Affected Versions: Sinatra versions prior to 2.2.0 Description: The issue is related to insufficient path name restrictions in the Ruby Sinatra web application framework, allowing a remote attacker to access confidential data. The vulnerability occurs because...

PT-2021-6791 · Smarty +2 · Smarty +2

Name of the Vulnerable Software and Affected Versions: Smarty versions prior to 3.1.39 Description: The issue is related to incorrect code generation handling when processing invalid function names in the Smarty template engine for PHP. This can allow a remote attacker to execute arbitrary code...

PT-2021-2475 · Accellion · Accellion Fta

Name of the Vulnerable Software and Affected Versions: Accellion FTA versions 9 12 411 and earlier Description: The issue is related to insufficient validation of incoming requests, allowing a remote attacker to perform a Server-Side Request Forgery SSRF attack. This can be achieved by sending a...