PT-2020-3562 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to errors in processing objects in memory, which can be exploited by an attacker to elevate their privileges using a specially crafted application. This can...

PT-2020-15094 · Huawei · Huawei +1

Name of the Vulnerable Software and Affected Versions: Huawei products affected versions not specified Description: The issue is related to multiple out of bounds OOB read vulnerabilities in the implementation of the Common Open Policy Service COPS protocol. A specific decoding function may occur...

PT-2020-6298

Name of the Vulnerable Software and Affected Versions Modicon M218, M241, M251, and M258 controllers affected versions not specified Description A Cleartext Transmission of Sensitive Information issue exists, which could leak sensitive information transmitted between the software and the...

PT-2020-2223 · Microsoft · Chakracore +1

Name of the Vulnerable Software and Affected Versions: ChakraCore affected versions not specified Description: A remote code execution issue exists due to the way the ChakraCore scripting engine handles objects in memory. This could allow an attacker to corrupt memory and execute arbitrary code i...

PT-2020-1658 · Microsoft · Chakracore +1

Name of the Vulnerable Software and Affected Versions: Microsoft Edge affected versions not specified Description: The issue is related to errors in handling objects in memory by the ChakraCore JavaScript engine. This could allow a remote attacker to execute arbitrary code, potentially gaining th...

PT-2020-1603 · Microsoft · Windows Installer +1

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Installer affected versions not specified Description: An elevation of privilege issue exists in the Windows Installer when MSI packages process symbolic links. This allows an attacker to potentially elevate their privileges...

PT-2020-1684 · Microsoft · Sharepoint Server

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: The issue is related to a cross-site scripting XSS vulnerability. This occurs when Microsoft SharePoint Server fails to properly sanitize a specially crafted web request...

PT-2019-7038 · Foreman · Foreman

Name of the Vulnerable Software and Affected Versions: Foreman affected versions not specified Description: The issue is related to improper input validation, which could lead to a partial Denial of Service. Recommendations: At the moment, there is no information about a newer version that contai...

PT-2019-6800

Name of the Vulnerable Software and Affected Versions libuser affected versions not specified Description The issue is related to information disclosure when the user's home directory is moved. Recommendations At the moment, there is no information about a newer version that contains a fix for th...

PT-2019-3924 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to errors in handling objects in memory in the Win32k component of Windows operating systems. It allows an attacker to execute arbitrary code using a speciall...

PT-2019-6951 · Red Hat · Cloudforms

Name of the Vulnerable Software and Affected Versions: CloudForms affected versions not specified Description: The issue concerns the storage of user passwords in a recoverable format, which poses a security risk. Recommendations: At the moment, there is no information about a newer version that...

PT-2019-6506 · Sangoma · Asterisk

Name of the Vulnerable Software and Affected Versions: Asterisk affected versions not specified Description: The issue allows calls on prohibited networks. There is no information available about the estimated number of potentially affected devices worldwide or real-world incidents where this iss...

PT-2019-6975 · D Link · Dir-865L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-865L affected versions not specified Description: The issue concerns information disclosure. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incident...

PT-2019-5897 · Python +4 · Python +4

Name of the Vulnerable Software and Affected Versions: Python affected versions not specified Description: The issue is related to a CRLF injection vulnerability in the urllib2 module of the Python programming language. This could allow a remote attacker to impact data integrity. Recommendations:...

PT-2019-3516

Name of the Vulnerable Software and Affected Versions Microsoft Windows Update Client affected versions not specified Description The issue is related to an elevation of privilege, where the Microsoft Windows Update Client does not properly handle privileges. This can be exploited by an attacker...

PT-2019-3547 · Microsoft · Windows Appx Deployment Server +1

Name of the Vulnerable Software and Affected Versions: Windows AppX Deployment Server affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows AppX Deployment Server component of Windows operating systems. It allows an attacker to elevat...

PT-2019-11823 · Jenkins · Jenkins Gitlab Logo Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins GitLab Logo Plugin affected versions not specified Description: The issue concerns the storage of credentials in an unencrypted manner within the global configuration file of the Jenkins master. This allows users with access to the...

PT-2019-3296 · Microsoft · Windows Appx Deployment Server +1

Name of the Vulnerable Software and Affected Versions: Windows AppX Deployment Server affected versions not specified Description: The issue is related to errors in connection handling within the Windows AppX Deployment Server component of Windows operating systems. It allows an attacker to...

PT-2019-2972 · Microsoft · Windows Jet Database Engine +1

Name of the Vulnerable Software and Affected Versions: Windows Jet Database Engine affected versions not specified Description: The issue is related to an out-of-bounds operation in memory within the Windows Jet Database Engine of Windows operating systems. This can be exploited by an attacker to...

PT-2019-9031 · Vivotek · Vivotek Fd8136

Name of the Vulnerable Software and Affected Versions: Vivotek FD8136 devices affected versions not specified Description: The issue allows for Remote Command Injection. It is noted that this is a different issue from other known vulnerabilities. The vendor has disputed this as a vulnerability,...