PT-2020-5857 · Dovecot +7 · Dovecot +7

Name of the Vulnerable Software and Affected Versions: Dovecot versions prior to 2.3.13 Description: The issue is related to insufficient input validation in the lda, lmtp, and imap components of the Dovecot mail server. This allows a remote attacker to cause a denial of service by crafting a...

PT-2020-6318

Name of the Vulnerable Software and Affected Versions wp-file-manager plugin versions prior to 6.9 Description The issue allows remote attackers to upload and execute arbitrary PHP code because it renames an unsafe example elFinder connector file to have the .php extension. This allows attackers ...

GHSA-2M96-9W4J-WGV7 Prototype Pollution in lodash.merge

Versions of lodash.merge before 4.6.1 are vulnerable to Prototype Pollution. The function 'merge' may allow a malicious user to modify the prototype of Object via proto causing the addition or modification of an existing property that will exist on all objects. Recommendation Update to version...

GHSA-7257-96VG-QF6X Remote Code Execution in Red Discord Bot

Impact A RCE exploit has been discovered in the Streams module: this exploit allows Discord users with specifically crafted "going live" messages to inject code into the Streams module's going live message. By abusing this exploit, it's possible to perform destructive actions and/or access...

PT-2020-14053 · Philips · Dreammapper

Name of the Vulnerable Software and Affected Versions: Philips DreamMapper versions 2.24 and prior Description: The issue allows information written to log files to potentially guide an attacker. Recommendations: For versions 2.24 and prior, update to a version later than 2.24 to resolve the issu...

PT-2020-14831 · Philips · Philips Suresigns Vs4

Name of the Vulnerable Software and Affected Versions: Philips SureSigns VS4 versions A.07.107 and prior Description: The issue arises because the product does not properly validate input or data it receives, which can lead to incorrect processing. Recommendations: For Philips SureSigns VS4...

Intel® PAC with Arria® 10 GX FPGA Advisory

This advisory contains CVEs in Altera products and has been transferred to Altera for support. The updated advisory can be found at the link below: https://www.altera.com/product-security/advisory-archive/intel-sa-00375.html...

PT-2021-11273 · Mediainfo +3 · Mediainfo +3

Name of the Vulnerable Software and Affected Versions: MediaInfo versions prior to 20.08 Description: The issue is a heap buffer overflow vulnerability. It occurs via MediaInfoLib::File Gxf::ChooseParser ChannelGrouping. Recommendations: For versions prior to 20.08, update to version 20.08 or lat...

PT-2020-20042 · Nextcloud +1 · Nextcloud Desktop Client +1

Name of the Vulnerable Software and Affected Versions: NextCloud Desktop Client version 2.6.4 Description: A memory corruption issue exists due to missing Address Space Layout Randomization ASLR and Data Execution Prevention DEP protections in the Windows version of the software, allowing memory...

PT-2020-5542 · Artifex +7 · Ghostscript +7

Name of the Vulnerable Software and Affected Versions: Ghostscript version 9.50 Description: The issue is related to a Division by Zero error in the bj10v print page function, located in contrib/japanese/gdev10v.c, which can be exploited by a remote attacker to cause a denial of service via a...

PT-2020-5554 · Artifex +7 · Ghostscript +7

Name of the Vulnerable Software and Affected Versions: GhostScript versions 9.50 Description: A buffer overflow issue in the epsc print page function allows a remote attacker to cause a denial of service via a crafted PDF file. Recommendations: For GhostScript version 9.50, update to version 9.51...

Intel® Computing Improvement Program Advisory

Summary: A potential security vulnerability in the Intel® Computing Improvement Program may allow escalation of privilege. Intel is releasing updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2020-8736 Description: Improper access control in subsystem for the...

Intel® Server Board M10JNP2SB Advisory

Summary: Potential security vulnerabilities in the Intel® Server Board M10JNP2SB may allow escalation of privilege. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2020-8733 Description: Improper buffer restrictions in the firmwar...

PT-2020-14810 · Advantech · Advantech Webaccess Hmi Designer

Name of the Vulnerable Software and Affected Versions: Advantech WebAccess HMI Designer versions 2.1.9.31 and prior Description: An out-of-bounds read issue may be exploited by processing specially crafted project files, allowing an attacker to read information. Recommendations: For Advantech...

PT-2020-14726 · Atlassian · Gantt-Chart For Jira

Name of the Vulnerable Software and Affected Versions: Gantt-Chart for Jira versions prior to 5.5.4 Description: An issue in the Gantt-Chart module allows authenticated attackers to read and write to the module configuration of other users due to a missing privilege check. This can also be used t...

PT-2020-3623 · Gnu +7 · Grub2 +7

Name of the Vulnerable Software and Affected Versions: grub2 versions prior to 2.06 Description: The issue is related to a buffer overflow when handling symbolic links in ext filesystems. An arithmetic overflow occurs when a filesystem contains a symbolic link with an inode size of UINT32 MAX,...

PT-2020-18687 · WordPress · Srs Simple Hits Counter Plugin

Name of the Vulnerable Software and Affected Versions: SRS Simple Hits Counter Plugin for WordPress versions 1.0.3 through 1.0.4 Description: The issue is related to SQL Injection, where improper neutralization of special elements used in an SQL command allows a remote, unauthenticated attacker t...

PT-2020-13508 · Os4Ed · Opensis

Name of the Vulnerable Software and Affected Versions: openSIS versions prior to 7.5 Description: The issue allows Directory Traversal. Recommendations: For openSIS versions prior to 7.5, update to version 7.5 or later to resolve the issue...

PT-2020-6184

Name of the Vulnerable Software and Affected Versions OpenSSH versions 5.7 through 8.4 Description The client side in OpenSSH has an Observable Discrepancy leading to an information leak in the algorithm negotiation. This allows man-in-the-middle attackers to target initial connection attempts...

PT-2020-5644

Name of the Vulnerable Software and Affected Versions rack versions prior to 2.2.3 rack versions prior to 2.1.4 Description A security issue exists due to a reliance on cookies without proper validation or integrity checks, making it possible for an attacker to forge a secure or host-only cookie...