PT-2023-5108

Name of the Vulnerable Software and Affected Versions vim versions 9.0.1367-1 through 9.0.1367-3 Description The issue is related to a divide by zero error in the vim text editor. Exploitation of this issue may allow an attacker to execute arbitrary code. Recommendations For versions 9.0.1367-1...

PT-2023-22848 · Unknown · Sysinput Hal Service

Name of the Vulnerable Software and Affected Versions: sysinput HAL service versions prior to SMR Jul-2023 Release 1 Description: The issue is related to an out of bounds read and write in the enableTspDevice function of the sysinput HAL service. This allows local attackers to execute arbitrary...

PT-2023-1824 · Adobe · Dimension

Name of the Vulnerable Software and Affected Versions: Adobe Dimension versions 3.4.7 and earlier Description: The issue is related to an out-of-bounds write vulnerability in Adobe Dimension, which could result in arbitrary code execution in the context of the current user. Exploitation of this...

PT-2023-3250 · Siemens · Tecnomatix Plant Simulation

Name of the Vulnerable Software and Affected Versions: Tecnomatix Plant Simulation versions prior to V2201.0006 Description: A vulnerability has been identified in the affected application, where an out of bounds write past the end of an allocated buffer occurs while parsing a specially crafted S...

PT-2023-14683 · Json.H · Json.H

Name of the Vulnerable Software and Affected Versions: sheredom json.h versions before commit 0825301a07cbf51653882bf2b153cc81fdadf41 Description: The issue is related to a buffer overflow vulnerability in the json parse key function. This vulnerability allows attackers to execute arbitrary code...

PT-2022-6722 · Synology · Synology Router Manager

Name of the Vulnerable Software and Affected Versions: Synology Router Manager versions prior to 1.2.5-8227-6 Synology Router Manager versions prior to 1.3.1-9346-3 Description: The issue is related to improper neutralization of special elements used in an OS command, allowing man-in-the-middle...

PT-2022-27160 · Ff4J · Ff4J

Name of the Vulnerable Software and Affected Versions: ff4j version 1.8.1 Description: The issue is related to Remote Code Execution RCE. It has been patched in version 1.9. Recommendations: For ff4j version 1.8.1, update to version 1.9 to resolve the issue...

PT-2022-5353 · Mozilla +10 · Firefox +10

Name of the Vulnerable Software and Affected Versions: Pixman versions prior to 0.42.2 Description: The issue is related to an out-of-bounds write, also known as a heap-based buffer overflow, in the rasterize edges 8 function of the Pixman library. This occurs due to an integer overflow in pixman...

PT-2022-25042 · Unknown · Libagifencoder.Quram.So

Name of the Vulnerable Software and Affected Versions: libagifencoder.quram.so library prior to SMR Oct-2022 Release 1 Description: A heap-based overflow vulnerability in the makeContactAGIF function of the libagifencoder.quram.so library allows an attacker to perform code execution...

PT-2022-12417 · Unknown · Globalprotect-Openconnect

Name of the Vulnerable Software and Affected Versions: GlobalProtect-openconnect versions prior to 1.4.3 Description: The issue concerns incorrect access control in GPService through DBUS, GUI Application. This allows arbitrary users to execute commands as root by submitting the --script=...

PT-2022-12158 · Owncloud · Owncloud

Name of the Vulnerable Software and Affected Versions: ownCloud versions prior to 2.9.2 Description: The issue allows Resource Injection by a server into the desktop client via a URL, leading to remote code execution. Recommendations: For versions prior to 2.9.2, update to version 2.9.2 or later ...

CVE-2021-25437

Improper access control vulnerability in Tizen FOTA service prior to Firmware update JUL-2021 Release allows attackers to arbitrary code execution by replacing FOTA update file...

PT-2021-2441

Name of the Vulnerable Software and Affected Versions: Python versions 3.x through 3.9.1 Description: The issue is related to a buffer overflow in the PyCArg repr function in ctypes/callproc.c, which may lead to remote code execution in certain Python applications that accept floating-point numbe...

GHSA-C84H-W6CR-5V8Q Markdown-supplied Shell Command Execution

Impact lookatme versions prior to 2.3.0 automatically loaded the built-in "terminal" and "fileloader" extensions. Users that use lookatme to render untrusted markdown may have malicious shell commands automatically run on their system. Patches Users should upgrade to lookatme versions 2.3.0 or...

react-dev-utils on Windows vulnerable to Remote Code Execution

react-dev-utils on Windows is vulnerable to remote code execution. Recommendation Update to one of the following versions, depending on the release line that you are using. - 1.0.4 - 2.0.2 - 3.1.2 - 4.2.2 - 5.0.2 - 6.0.0-next.a671462c...

PT-2018-9385 · Dave Gamble · Cjson

Name of the Vulnerable Software and Affected Versions: cJSON versions 1.7.3 and earlier Description: The issue is related to a Use After Free problem in the cJSON library, which can lead to a crash, data corruption, or even Remote Code Execution RCE. The exploitability depends on how the...

Security Bulletin: Multiple vulnerabilities in modules from the IBM SDK for Node.js affect the Cordova tools packaged in Rational Developer for i Modernization Tools Java Edition and Rational Developer for AIX and Linux (CVE-2014-7191 and CVE-2014-7192)

Summary Security vulnerabilities have been discovered in the syntax-error and qs modules packaged in the IBM SDK for Node.js and Cordova platform packaged in Rational Developer for i Modernization Tools Java Edition and Rational Developer for AIX and Linux. The fix upgrades IBM SDK for Node.js to...

PT-2018-3600

Name of the Vulnerable Software and Affected Versions Drupal versions prior to 7.58 Drupal versions 8.x prior to 8.3.9 Drupal versions 8.4.x prior to 8.4.6 Drupal versions 8.5.x prior to 8.5.1 Description The issue is related to insufficient input validation in the Drupal CMS system, allowing a...

PT-2018-6543 · Acme +2 · Mini Httpd +3

Name of the Vulnerable Software and Affected Versions: mini httpd versions prior to 1.28 thttpd versions prior to 2.28 Description: The issue is related to a buffer overflow in the htpasswd implementation, which can be exploited remotely to perform code execution. Recommendations: For mini httpd...

Debian DLA-1068-1 : git security update

Joern Schneeweisz discovered that git, a distributed revision control system, did not correctly handle maliciously constructed ssh:// URLs. This allowed an attacker to run an arbitrary shell command, for instance via git submodules. For Debian 7 'Wheezy', these problems have been fixed in version...