1141 matches found
PT-2020-20206
Name of the Vulnerable Software and Affected Versions Kubernetes versions prior to 1.15.12 Kubernetes versions prior to 1.16.9 Kubernetes versions prior to 1.17.5 Kubernetes versions 1.0 through 1.14 Kubernetes version 1.18.0 Description The issue allows certain authorized users to leak up to 500...
PT-2020-5646 · Ruby On Rails +3 · Rails +3
Name of the Vulnerable Software and Affected Versions: rails versions 5.0.0 through 5.2.4.2 rails versions 6.0.0 through 6.0.3 Description: A deserialization of untrusted data issue exists, allowing an attacker to potentially leak information from Strong Parameters. The vulnerability is related t...
PT-2020-3713
Name of the Vulnerable Software and Affected Versions: Puma versions prior to 3.12.5 Puma versions prior to 4.3.4 Description: The issue is related to the handling of HTTP requests in Puma, a RubyGem for Ruby/Rack applications. An attacker could smuggle an HTTP response by using an invalid...
PT-2020-12823 · Sonatype · Sonatype Nexus Repository Manager +1
Name of the Vulnerable Software and Affected Versions: Sonatype Nexus Repository Manager versions 3.21.1 Description: An issue was discovered in Sonatype Nexus Repository Manager. It is possible for a user with appropriate privileges to create, modify, and execute scripting tasks without use of t...
PT-2020-19026 · Sap · Sap Business Client
Name of the Vulnerable Software and Affected Versions: SAP Business Client versions 6.5, 7.0 Description: The issue is related to the lack of necessary integrity checks in the SAP Business Client, which could be exploited by an attacker under certain conditions to modify the installer...
PT-2020-4068 · Fasterxml +4 · Jackson-Databind +4
Name of the Vulnerable Software and Affected Versions: FasterXML jackson-databind versions 2.x before 2.9.10.4 Description: The issue is related to the interaction between serialization gadgets and typing in FasterXML jackson-databind, specifically with the...
PT-2020-5173 · Canonical · Apport +1
Name of the Vulnerable Software and Affected Versions: Apport versions prior to 2.20.1-0ubuntu2.23 Apport versions prior to 2.20.9-0ubuntu7.14 Apport versions prior to 2.20.11-0ubuntu8.8 Apport versions prior to 2.20.11-0ubuntu22 Description: The issue is related to Apport creating a world-writab...
PT-2020-12147 · Chadha · Phpkb Standard Multi-Language
Name of the Vulnerable Software and Affected Versions: Chadha PHPKB Standard Multi-Language version 9 Description: The issue allows attackers to inject arbitrary web script or HTML via the sort parameter in the admin/manage-news.php file. This can lead to reflected XSS attacks. Recommendations: F...
PT-2020-20627 · Catalyst It · Mahara
Name of the Vulnerable Software and Affected Versions: Mahara versions 18.10 through 18.10.4 Mahara versions 19.04 through 19.04.3 Mahara versions 19.10 through 19.10.1 Description: The issue concerns the disclosure of file metadata information to group members in the Elasticsearch result list,...
PT-2020-3305
Name of the Vulnerable Software and Affected Versions FasterXML jackson-databind versions 2.7.9.6 and earlier, 2.8.11.5 and earlier, 2.9.10.3 and earlier Description The issue is related to the interaction between serialization gadgets and typing in the FasterXML jackson-databind library,...
PT-2020-6521
Name of the Vulnerable Software and Affected Versions Duplicator plugin versions prior to 1.3.28 Duplicator Pro versions prior to 3.8.7.1 Description The issue allows Directory Traversal via ../ in the file parameter to duplicator download or duplicator init API endpoints, such as...
PT-2020-6382
Name of the Vulnerable Software and Affected Versions DrayTek Vigor3900 versions 1.4.4 Beta and earlier DrayTek Vigor2960 versions 1.3.1 Beta and earlier DrayTek Vigor300B versions 1.3.3 Beta, 1.4.2.1 Beta, and 1.4.4 Beta Description The issue is related to the WebUI interface of DrayTek Vigor...
PT-2020-11251 · Wowza · Wowza Streaming Engine
Name of the Vulnerable Software and Affected Versions: Wowza Streaming Engine versions 4.8.0 and earlier Wowza Streaming Engine versions 4.7.7 and 4.7.8 Description: The issue arises from multiple authenticated XSS vulnerabilities. These can be exploited via the customList%5B0%5D.value field in...
PT-2020-2651 · Oracle +2 · Oracle Retail Order Broker +2
Name of the Vulnerable Software and Affected Versions: Spring Framework versions 5.0.x prior to 5.0.16 Spring Framework versions 5.1.x prior to 5.1.13 Spring Framework versions 5.2.x prior to 5.2.3 Oracle Retail Order Broker affected versions not specified Description: The issue exists due to...
PT-2019-13485 · Hms Networks · En100 Ethernet Module Iec 61850 Variant +4
Name of the Vulnerable Software and Affected Versions: EN100 Ethernet module DNP3 variant All versions EN100 Ethernet module IEC 61850 variant All versions V4.37 EN100 Ethernet module IEC104 variant All versions EN100 Ethernet module Modbus TCP variant All versions EN100 Ethernet module PROFINET ...
PT-2019-4298
Name of the Vulnerable Software and Affected Versions PHP versions prior to 7.1.33 PHP versions prior to 7.2.24 PHP versions prior to 7.3.11 Description The issue is related to a buffer overflow vulnerability in the PHP-FPM component, which can be exploited to execute arbitrary commands on a...
PT-2019-15104 · Libtomcrypt +3 · Libtomcrypt +3
Name of the Vulnerable Software and Affected Versions: LibTomCrypt versions 1.18.2 and earlier Description: The issue arises from the der decode utf8 string function not properly detecting certain invalid UTF-8 sequences. This allows attackers to cause a denial of service, such as an out-of-bound...
PT-2019-12089 · Siemens · Simatic Hmi Panels +13
Name of the Vulnerable Software and Affected Versions: SIMATIC CP 1626 All versions SIMATIC ET 200SP Open Controller CPU 1515SP PC incl. SIPLUS variants All versions V20.8 SIMATIC ET 200SP Open Controller CPU 1515SP PC2 incl. SIPLUS variants All versions V20.8 SIMATIC HMI Panel incl. SIPLUS...
PT-2019-5285
Name of the Vulnerable Software and Affected Versions Ansible versions 2.6.x through 2.6.18 Ansible versions 2.7.x through 2.7.12 Ansible versions 2.8.x through 2.8.3 Description The issue is related to insufficient input validation in the Ansible configuration management system. This could allow...
