PT-2020-4820 · Microsoft · Heif Image Extension

Name of the Vulnerable Software and Affected Versions: HEIF Image Extension affected versions not specified Description: The issue is related to incorrect code generation management in the HEIF Image Extension, which can be exploited by a remote attacker to execute arbitrary code. Recommendations...

PT-2020-4609 · Microsoft · Windows Uso Core Worker +1

Name of the Vulnerable Software and Affected Versions: Windows USO Core Worker affected versions not specified Description: The issue is related to insufficient access restrictions to certain functions in the Windows USO Core Worker component, allowing an attacker to potentially elevate their...

PT-2020-4826 · Microsoft · Windows Camera +1

Name of the Vulnerable Software and Affected Versions: Windows Camera affected versions not specified Description: The issue is related to a lack of protection for sensitive data in the Windows Camera Codec component, allowing an attacker to disclose protected information. This can potentially le...

PT-2023-21655 · Moodle +1 · Moodle +1

Name of the Vulnerable Software and Affected Versions: Moodle affected versions not specified Description: The issue arises when the algebra filter is enabled but not functional, typically due to missing necessary binaries from the server. This presents a cross-site scripting XSS risk...

PT-2020-4665 · Cisco · Cisco Integrated Management Controller

Name of the Vulnerable Software and Affected Versions: Cisco Integrated Management Controller affected versions not specified Description: A vulnerability in the API endpoints of Cisco Integrated Management Controller could allow an authenticated, remote attacker to bypass authorization and take...

PT-2020-19934 · Tcpdump +9 · Tcpdump +9

Name of the Vulnerable Software and Affected Versions: tcpdump version 4.9.3 Description: The issue concerns the ppp decapsulator in tcpdump, which can be tricked into allocating a large amount of memory. There is no information provided about the estimated number of potentially affected devices...

PT-2020-4713 · Cisco · Cisco Firepower Management Center

Name of the Vulnerable Software and Affected Versions: Cisco Firepower Management Center FMC Software affected versions not specified Description: The issue is related to an open redirect vulnerability in the web-based management interface. This could allow a remote attacker to redirect a user to...

PT-2020-4385 · Microsoft · Network Watcher Agent

Name of the Vulnerable Software and Affected Versions: Network Watcher Agent virtual machine extension for Linux affected versions not specified Description: An elevation of privilege issue exists in the Network Watcher Agent virtual machine extension for Linux. This could allow an attacker to...

PT-2020-4323 · Microsoft · Windows Storage Services +1

Name of the Vulnerable Software and Affected Versions: Windows Storage Services affected versions not specified Description: The issue is related to the improper handling of file operations by the Windows Storage Services, which could allow an attacker to gain elevated privileges. To exploit this...

PT-2020-4426 · Cisco · Cisco Ios Xe

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software affected versions not specified Description: The issue is related to errors in access control for the Telnet/Secure Shell SSH command-line interface of Cisco IOS XE Software. This could allow an authenticated, local...

PT-2020-3763 · Microsoft · Internet Explorer

Name of the Vulnerable Software and Affected Versions: Internet Explorer affected versions not specified Description: A remote code execution issue exists due to the MSHTML engine's improper validation of input. This could allow an attacker to execute arbitrary code in the context of the current...

PT-2020-3812 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in the Storage Service component, which improperly handles file operations. This could allow an attacker to gain elevated...

PT-2020-22944

Name of the Vulnerable Software and Affected Versions Acrobat Reader versions 2020.009.20074 and earlier Acrobat Reader versions 2020.001.30002 and earlier Acrobat Reader versions 2017.011.30171 and earlier Acrobat Reader versions 2015.006.30523 and earlier Description An out-of-bounds read issue...

PT-2020-3825 · Microsoft · Windows Work Folder Service +1

Name of the Vulnerable Software and Affected Versions: Windows Work Folders Service affected versions not specified Description: The issue is related to incorrect handling of file operations or memory by the Windows Work Folders Service, which can allow an attacker to elevate their privileges usi...

PT-2020-3758 · Microsoft · Windows Backup Engine +1

Name of the Vulnerable Software and Affected Versions: Windows Backup Engine affected versions not specified Description: The issue is related to an elevation of privilege vulnerability that occurs when the Windows Backup Engine improperly handles memory. To exploit this, an attacker must first...

PT-2020-13260 · Comodo +1 · Itop +1

Name of the Vulnerable Software and Affected Versions: Combodo iTop affected versions not specified Description: The issue concerns the lack of validation for inputted parameters, allowing attackers to inject malicious commands and initiate a cross-site scripting XSS attack. There is no informati...

PT-2020-13248 · Hashicorp · Hashicorp Consul +1

Name of the Vulnerable Software and Affected Versions: HashiCorp Consul and Consul Enterprise versions 1.6.0 through 1.6.5 HashiCorp Consul and Consul Enterprise versions 1.7.0 through 1.7.3 Description: The issue is related to a denial of service DoS condition that can occur when HashiCorp Consu...

PT-2020-15099 · Huawei · Huawei +1

Name of the Vulnerable Software and Affected Versions: Huawei products affected versions not specified Description: The issue is related to multiple out of bounds OOB read vulnerabilities in the implementation of the Common Open Policy Service COPS protocol. A specific decoding function may cause...

PT-2020-5594 · D Link · Dsl-2888A

Name of the Vulnerable Software and Affected Versions: D-Link DSL-2888A versions prior to AU 2.31 V1.1.47ae55 Description: An issue was discovered that allows an unauthenticated attacker to bypass authentication and access authenticated pages and functionality. This is related to weaknesses in th...

Internal Property Tampering

Overview valib is an A standalone javascript library tailored for validation. Affected versions of this package are vulnerable to Internal Property Tampering. A maliciously crafted JavaScript object can bypass several inspection functions provided by valib. Valib uses a built-in function...