PT-2021-6942

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description The issue is related to an elevation-of-privilege vulnerability in the Storage Spaces Controller driver, which is caused by insecure privilege management. This vulnerability can be...

PT-2021-15201

Name of the Vulnerable Software and Affected Versions PowerLogic PM55xx affected versions not specified PowerLogic PM8ECC affected versions not specified PowerLogic EGX100 affected versions not specified PowerLogic EGX300 affected versions not specified Description A Weak Password Recovery...

Security Bulletin: IBM DataPower Gateway affected by vulnerability in OpenSSL (CVE-2019-1551)

Summary IBM DataPower Gateway has addressed a potential overflow in OpenSSL: CVE-2019-1551 Vulnerability Details CVEID: CVE-2019-1551 DESCRIPTION: OpenSSL could allow a remote attacker to obtain sensitive information, caused by an overflow in the x6464 Montgomery squaring procedure used in...

Security Bulletin: Vulnerability in SSL affects IBM DataPower Gateways (CVE-2016-8610)

Summary An SSL vulnerability was disclosed by the OpenSSL Project. IBM DataPower Gateways has addressed the applicable CVE. Vulnerability Details CVEID: CVE-2016-8610 DESCRIPTION: SSL/TLS protocol is vulnerable to a denial of service, caused by an error when processing ALERT packets during a SSL...

PT-2021-3298

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to insufficient access control in the Windows operating system kernel, allowing an attacker to potentially elevate their privileges. This could impact the system's...

PT-2021-6803 · Adobe · Premiere Elements

Name of the Vulnerable Software and Affected Versions: Adobe Premiere Elements versions 5.2 and earlier Description: The issue is related to an insecure temporary file creation vulnerability. An unauthenticated attacker could leverage this vulnerability to call functions against the installer to...

PT-2021-4255 · Bluez +7 · Bluez +7

Name of the Vulnerable Software and Affected Versions: BlueZ affected versions not specified Description: The issue is related to improper access control in BlueZ, which may allow an authenticated user to potentially enable information disclosure via adjacent access. This is due to incorrect...

PT-2021-3305 · Microsoft · Windows Bind Filter Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Bind Filter Driver affected versions not specified Description: The issue is related to an information disclosure vulnerability in the Windows Bind Filter Driver. It may allow an attacker to obtain unauthorized access to protected...

PT-2021-3285 · Microsoft · Sharepoint Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: The issue is related to incorrect code generation management in Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server...

PT-2021-3291 · Microsoft · Windows Defender

Name of the Vulnerable Software and Affected Versions: Windows Defender affected versions not specified Description: The issue is related to incorrect code generation management in Windows Defender, which is part of the Windows operating system. Exploitation of this issue may allow an attacker to...

PT-2021-3295 · Microsoft · Office Graphics +1

Name of the Vulnerable Software and Affected Versions: Microsoft Office Graphics affected versions not specified Description: The issue is related to a use-after-free vulnerability in the Microsoft Office Graphics component, which can be exploited by remote attackers to execute arbitrary code. Th...

PT-2021-3282 · Microsoft · Windows Mshtml Platform +1

Name of the Vulnerable Software and Affected Versions: Windows HTML Platforms affected versions not specified Description: The issue is related to errors in privilege management within the Windows HTML Platform component of the Windows operating system. This can allow a remote attacker to bypass...

PT-2021-6306 · Microsoft · Windows Installer +1

Name of the Vulnerable Software and Affected Versions: Windows Installer affected versions not specified Description: The issue is related to an information disclosure vulnerability in the Windows Installer component of the Microsoft Windows operating system. This vulnerability can be exploited t...

PT-2021-20339 · Luca · Luca

Name of the Vulnerable Software and Affected Versions: Luca versions 1.7.4 and earlier Description: The issue allows remote attackers to obtain sensitive information about COVID-19 tracking. This is because requests related to Check-In State occur shortly after requests for Phone Number...

PT-2024-11327 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a use-after-free vulnerability in the Linux kernel's iSCSI subsystem. If a unbind target call has not been made, there is a potential race condition where iscsi...

PT-2024-11187 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to memory corruption in the RX ring of the Linux kernel's lantiq module. When memory allocation or DMA mapping fails, an invalid address is programmed into the...

PT-2024-11351 · Linux +7 · Linux Kernel +7

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A NULL pointer dereference issue has been identified in the Linux kernel, specifically in the udf symlink function. The epos.bh variable is assigned a value returned by udf tgetblk,...

PT-2021-8193

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the drm sched entity kill jobs function in the Linux kernel, which can cause data corruptions due to a buffer overflow. This can potentially allow a remote attack...

PT-2024-11154 · Linux +7 · Linux Kernel +7

Name of the Vulnerable Software and Affected Versions: Linux kernel version 5.13.0-rc1+ Description: The vulnerability is related to RDMA/rxe, where an invalid lkey is supplied, causing a kernel panic when an atomic operation is sent with an explicitly wrong lkey. The issue arises from the missin...

PT-2021-10669

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10.2641 Description: A heap-based buffer overflow issue exists in the software. The issue is located in the ../../programs/escape.c file at line 97, and is related to the htmlwescape function. Recommendations: For GNU...