1747 matches found
PT-2021-23395 · Unknown · Livehelperchat
Name of the Vulnerable Software and Affected Versions: livehelperchat affected versions not specified Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This means that the software does not properly neutralize use...
PT-2021-20854 · Solarwinds · Solarwinds Web Help Desk
Name of the Vulnerable Software and Affected Versions: SolarWinds Web Help Desk affected versions not specified Description: A security issue has been discovered in the SolarWinds Web Help Desk product, where hard-coded credentials allow an attacker with local access to the host machine to execut...
PT-2021-23155 · Pypi · Pytorch-Lightning
Name of the Vulnerable Software and Affected Versions: pytorch-lightning affected versions not specified Description: The issue concerns the deserialization of untrusted data in pytorch-lightning. There is no information provided about the estimated number of potentially affected devices worldwid...
PT-2022-2351 · Fribidi +10 · Fribidi +10
Name of the Vulnerable Software and Affected Versions: Fribidi affected versions not specified Description: The issue is caused by a stack-based buffer overflow flaw in the Fribidi package. This flaw allows an attacker to pass a specially crafted file to the Fribidi application, which can lead to...
PT-2021-7004
Name of the Vulnerable Software and Affected Versions AVG Anti-Virus Free affected versions not specified AVG Internet Security affected versions not specified AVG Anti-Virus affected versions not specified Description The issue is related to insufficient access control in the aswArPot.sys driver...
PT-2021-24129 · Privoxy +2 · Privoxy +2
Name of the Vulnerable Software and Affected Versions: Privoxy affected versions not specified Description: A memory leak issue was discovered in Privoxy when handling errors. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...
PT-2021-23264 · Unknown · Livehelperchat
Name of the Vulnerable Software and Affected Versions: livehelperchat affected versions not specified Description: The issue is related to Cross-Site Request Forgery CSRF, which is a type of attack that tricks a user into performing unintended actions on a web application. No information is...
PT-2021-7150 · Microsoft · Exchange Server
Name of the Vulnerable Software and Affected Versions: Microsoft Exchange Server affected versions not specified Description: The issue is related to insufficient access controls in Microsoft Exchange Server, which can be exploited to elevate privileges. This allows an attacker to affect the...
PT-2021-6343 · Unknown · Hevc Video Extensions
Name of the Vulnerable Software and Affected Versions: HEVC Video Extensions affected versions not specified Description: The issue is related to incorrect code generation management in the HEVC Video Extensions codec. Exploitation of this issue may allow an attacker to execute arbitrary code...
PT-2021-5695 · Microsoft · Windows Common Log File System Driver +1
Name of the Vulnerable Software and Affected Versions: Windows Common Log File System Driver affected versions not specified Description: The issue is related to insufficient access control in the Windows Common Log File System Driver of the Windows operating system. Exploitation of this issue ma...
PT-2021-5671
Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description The issue is related to errors in the representation of information by the user interface, allowing an attacker to conduct a spoofing attack. This can affect the system, potentially...
PT-2021-5673 · Microsoft · Defender For Iot
Name of the Vulnerable Software and Affected Versions: Microsoft Defender for IoT affected versions not specified Description: The issue is related to a lack of protection for service data, which could allow a remote attacker to gain unauthorized access to a device. Recommendations: At the moment...
PT-2021-6389
Name of the Vulnerable Software and Affected Versions Microsoft Excel affected versions not specified Description The issue is related to incorrect code generation management in Microsoft Office, Microsoft Excel, and Microsoft 365 packages. This allows a remote attacker to execute arbitrary code...
PT-2021-24130 · Privoxy +4 · Privoxy +4
Name of the Vulnerable Software and Affected Versions: Privoxy affected versions not specified Description: A cross-site scripting XSS issue was discovered in Privoxy. The problem was addressed by encoding the template name in the cgi error no template function when Privoxy is set to serve the us...
PT-2021-6328 · Microsoft · Defender For Iot
Name of the Vulnerable Software and Affected Versions: Microsoft Defender for IoT affected versions not specified Description: The issue is related to a lack of proper validation of user-input strings before they are used to execute system calls. This could allow a remote attacker to execute...
PT-2021-21497 · Huawei · Huawei Smartphone
Name of the Vulnerable Software and Affected Versions: Huawei Smartphone affected versions not specified Description: The issue is related to an Uncaught Exception, which may lead to a remote Denial of Service when successfully exploited. Recommendations: At the moment, there is no information...
PT-2021-6133 · Vim +6 · Vim +6
Name of the Vulnerable Software and Affected Versions: vim affected versions not specified Description: The issue is related to a Use After Free condition in the vim text editor, specifically in the ex open function located in src/ex docmd.c. This condition may allow an attacker to impact the...
PT-2021-23939 · Discourse · Discourse
Name of the Vulnerable Software and Affected Versions: Discourse affected versions not specified Description: A vulnerability in the Polls feature of Discourse allowed users to vote multiple times in a single-option poll. The issue is related to the Polls feature, but specific details about...
PT-2021-7299
Name of the Vulnerable Software and Affected Versions vim affected versions not specified Description The issue is related to a Heap-based Buffer Overflow in the vim text editor. This could allow an attacker to impact the confidentiality, integrity, and availability of protected information...
PT-2021-5537 · Busybox +5 · Busybox +5
Name of the Vulnerable Software and Affected Versions: Busybox affected versions not specified Description: A use-after-free issue in Busybox's awk applet can lead to denial of service and possibly code execution when processing a crafted awk pattern in the handle special function. This can allow...