PT-2020-4080 · Microsoft · Visual Studio

Name of the Vulnerable Software and Affected Versions: Visual Studio affected versions not specified Description: A remote code execution issue exists due to improper handling of objects in memory. This could allow an attacker to run arbitrary code in the context of the current user. If the user...

PT-2020-3988 · Microsoft · Office Excel +1

Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Description: An information disclosure issue exists due to Microsoft Excel's improper handling of its memory contents. This could allow an attacker to compromise a user's computer or data by...

PT-2020-4150 · Microsoft · Windows Media Audio Decoder +1

Name of the Vulnerable Software and Affected Versions: Windows Media Audio Decoder affected versions not specified Description: A remote code execution issue exists due to improper handling of objects by Windows Media Audio Decoder, allowing an attacker to potentially take control of an affected...

PT-2020-4040 · Microsoft · Office Excel +2

Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Description: A remote code execution issue exists in Microsoft Excel software when it fails to properly handle objects in memory. An attacker who successfully exploits this issue could run...

PT-2020-19747 · Unknown · Safe-Object2

Name of the Vulnerable Software and Affected Versions: safe-object2 versions affected versions not specified Description: The issue concerns Prototype Pollution via the setter function. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

PT-2020-19693 · U Root · U-Root

Name of the Vulnerable Software and Affected Versions: u-root versions affected versions not specified Description: The issue concerns path traversal attacks, specifically both leading and non-leading relative path traversal, in zip file extraction. This affects the u-root package, particularly i...

PT-2020-3801 · Microsoft · Windows Speech Runtime +1

Name of the Vulnerable Software and Affected Versions: Windows Speech Runtime affected versions not specified Description: The issue is related to an elevation of privilege vulnerability that occurs when the Windows Speech Runtime improperly handles memory. To exploit this, an attacker must first...

PT-2020-3726 · Microsoft · Windows Codecs Library

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Codecs Library affected versions not specified Description: A remote code execution issue exists due to errors in handling objects in memory. This can be exploited by a remote attacker using a specially crafted image file,...

PT-2020-3705 · Microsoft · Windows Codecs Library

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Codecs Library affected versions not specified Description: A remote code execution issue exists in the way Microsoft Windows Codecs Library handles objects in memory. This could allow an attacker to take control of the...

PT-2020-3823 · Microsoft · Windows State Repository Service +1

Name of the Vulnerable Software and Affected Versions: Windows State Repository Service affected versions not specified Description: An information disclosure issue exists due to the improper handling of objects in memory by the Windows State Repository Service. This could allow an attacker to...

PT-2020-3798 · Microsoft · Sharepoint Foundation +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Foundation affected versions not specified Microsoft SharePoint Enterprise Server affected versions not specified Description: An information disclosure issue...

PT-2020-13263 · Comodo +1 · Itop +1

Name of the Vulnerable Software and Affected Versions: Combodo iTop affected versions not specified Description: The issue is related to a cross-site request forgery CSRF vulnerability. This means that attackers can execute specific commands by forging requests from a malicious site...

PT-2020-3933 · Microsoft · Windows Dns +1

Name of the Vulnerable Software and Affected Versions: Windows DNS affected versions not specified Description: A denial of service issue exists due to improper handling of queries. An authenticated attacker can exploit this by sending malicious DNS queries, causing the DNS service to become...

PT-2020-3935 · Microsoft · Windows Modules Installer +1

Name of the Vulnerable Software and Affected Versions: Windows Modules Installer affected versions not specified Description: An elevation of privilege issue exists due to the improper handling of objects in memory by Windows Modules Installer. This could allow an attacker to run arbitrary code i...

PT-2020-18141 · Ibm · Ibm Tivoli Key Lifecycle Manager

Name of the Vulnerable Software and Affected Versions: IBM Tivoli Key Lifecycle Manager affected versions not specified Description: The issue is related to the default password strength requirements. By default, strong passwords are not required, making it easier for attackers to compromise user...

PT-2020-3161 · Microsoft · Outlook

Name of the Vulnerable Software and Affected Versions: Microsoft Outlook affected versions not specified Description: A remote code execution issue exists in Microsoft Outlook software due to its failure to properly handle objects in memory. This could allow an attacker to execute arbitrary code...

PT-2020-3185 · Microsoft · Visual Studio Code +1

Name of the Vulnerable Software and Affected Versions: Visual Studio affected versions not specified Visual Studio Code affected versions not specified Description: The issue is related to an elevation of privilege vulnerability when loading software dependencies. This vulnerability can allow an...

PT-2020-19702 · Casperjs Team · Casperjs

Name of the Vulnerable Software and Affected Versions: casperjs versions affected versions not specified Description: The issue concerns a Prototype Pollution vulnerability via the mergeObjects utility function in casperjs, a navigation scripting and testing utility for PhantomJS and SlimerJS. Th...

PT-2020-3357 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in handling objects in memory within the Windows operating system kernel. It allows an attacker to potentially elevate their privileges using a specially...

PT-2020-2860 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in handling objects in memory within the Windows operating system kernel. It allows an attacker to potentially elevate their privileges using a specially...