PT-2022-17341

Name of the Vulnerable Software and Affected Versions FreeTAKServer-UI version 1.9.8 Description The issue allows attackers to place arbitrary files anywhere on the system due to a problem in the filename argument of the "/DataPackageTable" API endpoint. Recommendations For FreeTAKServer-UI versi...

CVE-2021-44836

An issue was discovered in Delta RM 1.2. The /risque/risque/workflow/reset endpoint is lacking access controls, and it is possible for an unprivileged user to reopen a risk with a POST request, using the risqueID parameter to identify the risk to be re-opened...

GitLab 信息泄露漏洞

GitLab is a self-hosted, Git version control system project repository application developed using Ruby on Rails by GitLab, Inc. The application can be used to access a project's file content, commit history, bug list, etc. An information disclosure vulnerability exists in GitLab CE/EE, which ste...

Cloud Foundry Cloud Controller 资源管理错误漏洞

The Cloud Foundry Cloud Controller is a component of the Cloud Foundry Foundation that is responsible for interacting with users in the Cloud Foundry architecture. This component manages the entire lifecycle of an app and allows users to interact with Cloud Server from the command line. A resourc...

CVE-2021-41185

Mycodo is an environmental monitoring and regulation system. An exploit in versions prior to 8.12.7 allows anyone with access to endpoints to download files outside the intended directory. A patch has been applied and a release made. Users should upgrade to version 8.12.7. As a workaround, users...

CVE-2021-40500

SAP BusinessObjects Business Intelligence Platform Crystal Reports - versions 420, 430, allows an unauthenticated attacker to exploit missing XML validations at endpoints to read sensitive data. These endpoints are normally exposed over the network and successful exploitation can enable the...

CVE-2021-22017

Rhttproxy as used in vCenter Server contains a vulnerability due to improper implementation of URI normalization. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to bypass proxy leading to internal endpoints being accessed...

CVE-2021-31926

AMP Application Deployment Service in CubeCoders AMP 2.1.x before 2.1.1.2 allows a remote, authenticated user to open ports in the local system firewall by crafting an HTTPS request directly to the applicable API endpoint despite not having permission to make changes to the system's network...

PT-2021-18209 · Sydent · Sydent

Name of the Vulnerable Software and Affected Versions: Sydent versions 2.2.0 and prior Description: The issue is related to missing input validation of some parameters on the endpoints used to confirm third-party identifiers, which could cause excessive use of disk space and memory leading to...

PT-2021-9610 · Openiam · Openam

Name of the Vulnerable Software and Affected Versions: OpenIAM versions prior to 4.2.0.3 Description: The issue concerns a lack of permission verification for users attempting to perform administrative actions through the "/webconsole/rest/api/" endpoint. This means that users without proper...

PT-2020-14787 · Springblade · Springblade

Name of the Vulnerable Software and Affected Versions: SpringBlade versions prior to 2.7.2 Description: The issue concerns SQL Injection in the ORDER BY clause, related to the /api/blade-log/api/list endpoint, specifically the ascs and desc parameters. Recommendations: For versions prior to 2.7.2...

PT-2020-15418 · Jenkins · Jenkins Fortify On Demand Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Fortify on Demand Plugin versions 5.0.1 and earlier Description: A missing permission check in the Jenkins Fortify on Demand Plugin allows attackers with Overall/Read permission to connect to the globally configured Fortify on Demand...

PT-2020-14373 · Zyxel · Zyxel Cloudcnm Secumanager

Name of the Vulnerable Software and Affected Versions: Zyxel CloudCNM SecuManager versions 3.1.0 through 3.1.1 Description: The issue concerns a XSS vulnerability. It affects the handle campaign script link endpoint, specifically the script name parameter. The estimated number of potentially...

CVE-2017-18915

An issue was discovered in Mattermost Server before 3.8.2, 3.7.5, and 3.6.7. After a restart of a server, an attacker might suddenly gain API Endpoint access...

PT-2020-12810 · Algolplus · Algolplus Advanced Order Export For Woocommerce

Name of the Vulnerable Software and Affected Versions: AlgolPlus Advanced Order Export For WooCommerce plugin version 3.1.3 Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the woe post type parameter in the "view/settings-form.php"...

PT-2020-12348 · Draytek · Vigor2960 +2

Name of the Vulnerable Software and Affected Versions: Draytek Vigor3900 versions prior to 1.5.1 Draytek Vigor2960 versions prior to 1.5.1 Draytek Vigor300B versions prior to 1.5.1 Description: A stack-based buffer overflow occurs in the /cgi-bin/activate.cgi endpoint while base64 decoding the...

PT-2020-20583 · Aquaforest · Aquaforest Tiff Server

Name of the Vulnerable Software and Affected Versions: Aquaforest TIFF Server version 4.0 Description: The issue allows unauthenticated file and directory enumeration. This is achieved via the "tiffserver/tssp.aspx" endpoint. Recommendations: For Aquaforest TIFF Server version 4.0, consider...

PT-2020-11909 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab EE versions 11.6 through 12.8.1 Description: The issue allows information disclosure by sending a specially crafted request to the "vulnerability feedback" endpoint, potentially exposing a private project namespace. Recommendations: Fo...

PT-2020-12057 · Chadha · Phpkb Standard Multi-Language

Name of the Vulnerable Software and Affected Versions: Chadha PHPKB Standard Multi-Language version 9 Description: The issue allows remote attackers to download files from the server using a dot-dot-slash sequence ../ via the file parameter in the "admin/download.php" endpoint. Recommendations: F...

PT-2020-11250 · Wowza · Wowza Streaming Engine

Name of the Vulnerable Software and Affected Versions: Wowza Streaming Engine versions 4.8.0 and earlier Wowza Streaming Engine versions 4.7.7 through 4.7.8 Description: The issue allows an administrator to be tricked into making unwanted changes, such as adding another admin user, by following a...