PT-2019-18487 · Linear · Linear Emerge E3-Series

Name of the Vulnerable Software and Affected Versions: Linear eMerge E3-Series devices affected versions not specified Description: The issue allows for Unrestricted File Upload. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerabili...

PT-2019-11715 · Jenkins · Jenkins Twitter Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Twitter Plugin affected versions not specified Description: The issue concerns the storage of credentials in the Jenkins Twitter Plugin. Specifically, it stores credentials unencrypted in its global configuration file on the Jenkins...

PT-2019-7813 · Canonical +2 · Apparmor +3

Name of the Vulnerable Software and Affected Versions: AppArmor affected versions not specified Description: The issue affects AppArmor, where mount rules are accidentally widened when compiled. Recommendations: At the moment, there is no information about a newer version that contains a fix for...

PT-2019-12100

Name of the Vulnerable Software and Affected Versions Programmable Logic Controllers versions affected versions not specified Description The issue concerns a denial-of-service attack due to a flood of network packets. Researchers have found that some controllers from various manufacturers,...

PT-2019-8876 · Intel +2 · Edk Ii +2

Name of the Vulnerable Software and Affected Versions: EDK II affected versions not specified Description: The issue is related to an insufficient memory write check in the SMM service, which may allow an authenticated user to potentially enable escalation of privilege, information disclosure,...

PT-2019-6286 · Poppler +7 · Poppler +7

Name of the Vulnerable Software and Affected Versions: Poppler affected versions not specified Description: A flaw was found in the way certain PDF files were converted into HTML, allowing a remote attacker to exploit this flaw by providing a malicious PDF file that, when processed by the...

PT-2019-5891 · Unknown +2 · Libsndfile +2

Name of the Vulnerable Software and Affected Versions: Libsndfile affected versions not specified Description: The issue is related to a read beyond the limits of a buffer in the wav write header function in wav.c. This can be exploited by a local attacker to make the application crash, resulting...

PT-2019-9808

Name of the Vulnerable Software and Affected Versions ARM Trusted Firmware-A affected versions not specified Description The issue allows information disclosure. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability...

PT-2019-1134 · Microsoft · Sharepoint Server

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: A cross-site scripting issue exists due to inadequate protection of the web page structure. This can be exploited by sending a specially crafted request to the vulnerabl...

PT-2018-2285 · Microsoft · Exchange Server

Name of the Vulnerable Software and Affected Versions: Microsoft Exchange Server affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in Microsoft Exchange Server, which can be exploited by a remote attacker to gain elevated privileges. This...

PT-2018-10151 · Red Hat · Redhat-Certification

Name of the Vulnerable Software and Affected Versions: redhat-certification affected versions not specified Description: An uncontrolled resource consumption flaw has been discovered in the way documents are loaded. A remote attacker may provide an existing but invalid XML file which would be...

PT-2018-8802 · Cisco · Cisco Firesight System

Name of the Vulnerable Software and Affected Versions: Cisco FireSIGHT System Software affected versions not specified Description: A vulnerability exists in the detection engine of the software, allowing an unauthenticated, remote attacker to bypass a file policy configured to block file transfe...

PT-2018-2475 · Linux +2 · Linux +2

Name of the Vulnerable Software and Affected Versions: Linux affected versions not specified Description: The issue is caused by a buffer overflow in the Linux operating system kernel. Exploitation of this issue may allow an attacker to cause a denial of service. Recommendations: At the moment,...

PT-2018-18448

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description An elevation-of-privilege issue exists, allowing attackers to affect the system. No information is provided about the estimated number of potentially affected devices or real-world...

PT-2018-10104 · Alt +1 · Alt Linux

Name of the Vulnerable Software and Affected Versions: ALT Linux affected versions not specified Description: General information about the issue is not provided, except that it concerns a package vulnerability in ALT Linux. Recommendations: At the moment, there is no information about a newer...

PT-2018-4098 · Red Hat · Katello

Name of the Vulnerable Software and Affected Versions: Katello affected versions not specified Description: The issue allows remote authenticated users to execute the system remove deletion CLI command due to weaknesses in remove system permissions. Recommendations: At the moment, there is no...

PT-2018-3807 · Cisco · Cisco Ios Xe +1

Name of the Vulnerable Software and Affected Versions: Cisco IOS Software and Cisco IOS XE Software affected versions not specified Description: A vulnerability in the DHCP option 82 encapsulation functionality could allow an unauthenticated, remote attacker to cause an affected device to reload,...

PT-2018-6562 · Bose · Bose Soundtouch

Name of the Vulnerable Software and Affected Versions: Bose SoundTouch affected versions not specified Description: The issue allows for cross-site scripting XSS attacks through specially crafted song data from a music service. An example of such an attack is demonstrated using Pandora...

PT-2018-3858 · Axxonsoft · Axxon Next

Name of the Vulnerable Software and Affected Versions: AxxonSoft Axxon Next affected versions not specified Description: The issue is related to incorrect restriction of directory path names with limited access. Exploitation of this issue may allow a remote attacker to disclose protected...

PT-2018-3325

Name of the Vulnerable Software and Affected Versions jackson-databind affected versions not specified Description The issue is related to weaknesses in the deserialization mechanism of the jackson-databind library. Exploitation of this issue may allow a remote attacker to execute arbitrary code...