PT-2020-10916

Name of the Vulnerable Software and Affected Versions Data Protection Central versions 1.0 through 1.0.1, 18.1, 18.2, 19.1 Description The issue is related to an improper certificate chain of trust, which could be exploited by a remote unauthenticated attacker. This attacker could obtain a CA...

CVE-2019-16174

An XML injection vulnerability was found in Limesurvey before 3.17.14 that allows remote attackers to import specially crafted XML files and execute code or compromise data integrity...

PT-2018-1980

Name of the Vulnerable Software and Affected Versions RubyGems versions 2.2.9 and earlier RubyGems versions 2.3.6 and earlier RubyGems versions 2.4.3 and earlier RubyGems versions 2.5.0 and earlier RubyGems prior to trunk revision 62422 Description The issue is related to improper input validatio...

PT-2017-3730

Name of the Vulnerable Software and Affected Versions: GIMP version 2.8.22 Description: The issue is related to a heap-based buffer over-read in the read creator block function, located in plug-ins/common/file-psp.c. This can potentially allow a remote attacker to cause a denial of service,...

PT-2015-1130

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 10.3.6.0, 12.1.1.0, and 12.1.2.0 Description The issue affects the Oracle WebLogic Server component of Oracle Fusion Middleware, allowing a remote attacker to compromise data integrity. This is related to the...

PT-2014-1717

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 10.0.2.0 through 10.3.6.0 Oracle WebLogic Server versions 12.1.1.0 through 12.1.3.0 Description The issue allows remote authenticated users to compromise data integrity using the WLS Console. It affects the Orac...