PT-2021-7348

Name of the Vulnerable Software and Affected Versions BIND versions 9.11.0 through 9.11.36 BIND versions 9.12.0 through 9.16.26 BIND versions 9.17.0 through 9.18.0 BIND Supported Preview Editions versions 9.11.4-S1 through 9.11.36-S1 BIND Supported Preview Editions versions 9.16.8-S1 through...

PT-2021-2122 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 15.1R7-S9 Juniper Networks Junos OS 17.3 versions prior to 17.3R3-S11 Juniper Networks Junos OS 17.4 versions prior to 17.4R2-S12, 17.4R3-S3 Juniper Networks Junos OS 18.1 versions prior to 18.1R3-S...

PT-2021-2135 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Junos versions 17.3R3-S8 through 17.4R3-S2 Junos versions 18.2R3-S4 through 18.2R3-S5 Junos versions 18.3R3-S2 through 18.3R3-S3 Junos versions 18.4R3-S1 through 18.4R3-S6 Junos versions 19.2R2 through 19.2R3-S1 Junos versions 19.4R2 through...

PT-2020-15874 · Qnap · Qts +1

Name of the Vulnerable Software and Affected Versions: QTS versions prior to 4.5.1.1456 build 20201015 QuTS hero versions prior to h4.5.1.1472 build 20201031 QTS versions prior to 4.4.3.1354 build 20200702 QTS versions prior to 4.3.6.1333 build 20200608 QTS versions prior to 4.3.4.1368 build...

PT-2020-5282 · Nginx · Nginx Controller Agent

Name of the Vulnerable Software and Affected Versions: NGINX Controller Agent versions 1.0.1, 2.0.0 through 2.9.0, 3.0.0 through 3.9.0 Description: The issue is related to the NGINX Controller Agent's failure to use absolute paths when calling system utilities, which can be exploited by a remote...

PT-2020-6889 · Systemd +8 · Systemd +8

Name of the Vulnerable Software and Affected Versions: systemd versions prior to 247 Description: The issue is related to inadequate blocking of local privilege escalation for some Sudo configurations, specifically when the "systemctl status" command may be executed. This is due to systemd not...

PT-2020-5797

Name of the Vulnerable Software and Affected Versions: Roundcube Webmail versions 1.2.0 through 1.2.12 Roundcube Webmail versions 1.3.x through 1.3.15 Roundcube Webmail versions 1.4.x through 1.4.9 Description: An issue was discovered in Roundcube Webmail, where the linkref addindex function in...

PT-2020-4858 · Intel · Intel Csme +2

Name of the Vulnerable Software and Affected Versions: Intel CSME versions prior to 12.0.70 Intel CSME versions prior to 13.0.40 Intel CSME versions prior to 13.30.10 Intel CSME versions prior to 14.0.45 Intel CSME versions prior to 14.5.25 Intel TXE versions prior to 4.0.30 Intel SPS versions...

PT-2020-16560 · Legion Of The Bouncy Castle · Legion Of The Bouncy Castle Bc

Name of the Vulnerable Software and Affected Versions: Legion of the Bouncy Castle BC versions 1.61 and earlier Legion of the Bouncy Castle BC-FJA versions 1.0.1.2 and earlier Description: The issue allows attackers to obtain sensitive information about a private exponent due to observable...

PT-2020-5281 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.10-rc1 Description: A use-after-free flaw was found in kernel/trace/ring buffer.c, which could cause a denial of service problem due to a race condition in trace open and resize of cpu buffer running in parall...

PT-2020-6454 · Apple · Ipados +3

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.0.1 watchOS versions prior to 7.1 iOS versions prior to 12.4.9 and prior to 14.2 watchOS versions prior to 6.2.9 and prior to 5.3.9 macOS Catalina versions prior to 10.15.7 Supplemental Update and prior to 10.15.7...

PT-2020-6738 · Linux +9 · Linux Kernel +9

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.10 Description: The issue is related to a use-after-free vulnerability in the Linux kernel, specifically in the drivers/infiniband/core/ucma.c component. This vulnerability allows a remote attacker to access...

PT-2020-14842 · Hashicorp · Hashicorp Vault +1

Name of the Vulnerable Software and Affected Versions: HashiCorp Vault and Vault Enterprise versions 0.7.1 and newer Description: The issue concerns an authentication bypass when HashiCorp Vault and Vault Enterprise are configured with the AWS IAM auth method. This could potentially allow...

PT-2020-19344 · Elastic · Elasticsearch

Name of the Vulnerable Software and Affected Versions: Elasticsearch versions prior to 7.9.0 Elasticsearch versions prior to 6.8.12 Description: A field disclosure flaw was found in Elasticsearch when running a scrolling search with Field Level Security. If a user runs the same query another more...

PT-2020-20038 · Phpbb · Phpbb

Name of the Vulnerable Software and Affected Versions: phpBB versions prior to 3.2.10 phpBB versions prior to 3.3.1 Description: A vulnerability exists that allows the remote image dimensions check to be used for Server-Side Request Forgery SSRF. Recommendations: For versions prior to 3.2.10,...

August 11, 2020—KB4571694 (OS Build 14393.3866)

None None...

PT-2020-14665 · Liferay · Liferay Dxp +1

Name of the Vulnerable Software and Affected Versions: Liferay Portal versions prior to 7.3.0 Liferay DXP 7.0 versions prior to fix pack 90 Liferay DXP 7.1 versions prior to fix pack 17 Liferay DXP 7.2 versions prior to fix pack 5 Description: The issue allows man-in-the-middle attackers to execu...

PT-2020-6843 · Citrix · Citrix Sd-Wan Wanop +2

Name of the Vulnerable Software and Affected Versions: Citrix ADC versions prior to 13.0-58.30 Citrix ADC versions prior to 12.1-57.18 Citrix ADC versions prior to 12.0-63.21 Citrix ADC versions prior to 11.1-64.14 Citrix ADC versions prior to 10.5-70.18 Citrix Gateway versions prior to 13.0-58.3...

Mitsubishi Electric Factory Automation Engineering Software Products

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Mitsubishi Electric Equipment: Factory Automation Engineering Software Products Vulnerabilities: Improper Restriction of XML External Entity Reference and Uncontrolled Resource Consumption 2. RISK...

PT-2020-4194

Name of the Vulnerable Software and Affected Versions: FasterXML jackson-databind versions 2.x before 2.9.10.5 Description: The issue is related to the deserialization mechanism in the Jackson-databind library. It can be exploited by a remote attacker to execute arbitrary code. The vulnerability ...