PT-2020-3721 · Microsoft · Office

Name of the Vulnerable Software and Affected Versions: Microsoft Office affected versions not specified Description: A remote code execution issue exists in Microsoft Office software due to improper handling of objects in memory. An attacker who successfully exploits this issue could run arbitrar...

PT-2020-3832 · Microsoft · Windows Radio Management Api +1

Name of the Vulnerable Software and Affected Versions: Windows Radio Management API affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in the Windows Radio Management API, which is caused by improper memory handling. This can allow an...

PT-2020-3709 · Microsoft · Sharepoint Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: A cross-site-scripting XSS issue exists due to improper sanitization of specially crafted web requests by Microsoft SharePoint Server. An authenticated attacker could...

PT-2020-3669 · Microsoft · Windows Jet Database Engine +1

Name of the Vulnerable Software and Affected Versions: Windows Jet Database Engine affected versions not specified Description: A remote code execution issue exists due to the improper handling of objects in memory by the Windows Jet Database Engine. This could allow an attacker to execute...

PT-2020-3736 · Microsoft · Windows Ancillary Function Driver For Winsock +1

Name of the Vulnerable Software and Affected Versions: Windows Ancillary Function Driver for WinSock affected versions not specified Description: The issue is related to errors in memory object handling. Exploitation of this issue could allow an attacker to elevate their privileges using a...

PT-2020-3836 · Microsoft · Windows Backup Service +1

Name of the Vulnerable Software and Affected Versions: Windows Backup Service affected versions not specified Description: The issue is related to an elevation of privilege vulnerability that exists when the Windows Backup Service improperly handles file operations. To exploit this, an attacker...

PT-2020-3671 · Microsoft · Windows Media Foundation +1

Name of the Vulnerable Software and Affected Versions: Windows Media Foundation affected versions not specified Description: A memory corruption issue exists due to improper handling of objects in memory by Windows Media Foundation. This could allow an attacker to install programs, view, change, ...

PT-2020-3838 · Microsoft · Windows Backup Engine +1

Name of the Vulnerable Software and Affected Versions: Windows Backup Engine affected versions not specified Description: The issue is related to an elevation of privilege vulnerability that exists when the Windows Backup Engine improperly handles memory. To exploit this, an attacker would first...

PT-2020-13263 · Comodo +1 · Itop +1

Name of the Vulnerable Software and Affected Versions: Combodo iTop affected versions not specified Description: The issue is related to a cross-site request forgery CSRF vulnerability. This means that attackers can execute specific commands by forging requests from a malicious site...

PT-2020-3941 · Microsoft · Windows Graphics +1

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Graphics Component affected versions not specified Description: An information disclosure issue exists due to the improper handling of objects in memory by the Microsoft Windows Graphics Component. This could allow an attack...

PT-2020-3972 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions affected versions not specified Description: The issue is related to errors in handling calls by the splwow64.exe executable file in Microsoft Windows operating systems. This could allow an attacker to obtain...

PT-2020-3973 · Microsoft · Hyper-V +1

Name of the Vulnerable Software and Affected Versions: Microsoft Hyper-V affected versions not specified Description: A denial of service issue exists due to insufficient input validation in Microsoft Hyper-V. This can be exploited by an attacker with a privileged account on a guest operating...

PT-2020-13925

Name of the Vulnerable Software and Affected Versions Bitcoin Core version 0.20.0 Description The issue allows for a remote denial of service. Recommendations For Bitcoin Core version 0.20.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability...

Security Bulletin: IBM Planning Analytics has addressed multiple Security Vulnerabilities

Summary This Security Bulletin addresses security vulnerabilities that have been remediated in IBM Planning Analytics 2.0.9.2. Vulnerability Details CVEID: CVE-2020-4645 DESCRIPTION: IBM Planning Analytics Local is vulnerable to cross-site scripting. This vulnerability allows users to embed...

PT-2020-12233 · Osisoft · Osisoft Pi System

Name of the Vulnerable Software and Affected Versions: OSIsoft PI System affected versions not specified Description: A remote, unauthenticated attacker could crash the PI Network Manager service through specially crafted requests, resulting in blocked connections and queries to the PI Data...

Security Bulletin: Java vulnerability CVE-2019-2949 affecting IBM Streams

Summary Java vulnerability CVE-2019-2949 related to Kerberos affecting IBM Streams Vulnerability Details CVEID: CVE-2019-2949 DESCRIPTION: An unspecified vulnerability in Java SE related to the Kerberos component could allow an unauthenticated attacker to obtain sensitive information resulting in...

PT-2020-3131 · Cisco · Cisco Sd-Wan Vmanage

Name of the Vulnerable Software and Affected Versions: Cisco SD-WAN vManage Software affected versions not specified Description: The issue is related to insufficient validation of user-supplied input in the web-based management interface, allowing an authenticated, remote attacker to execute...

PT-2020-3113 · Cisco · Cisco Sd-Wan Vmanage

Name of the Vulnerable Software and Affected Versions: Cisco SD-WAN vManage Software affected versions not specified Description: The issue is due to insufficient input sanitization during user authentication processing, allowing an authenticated, remote attacker to execute code with root...

PT-2020-3158 · Microsoft · Windows Kernel +1

Name of the Vulnerable Software and Affected Versions: Windows Kernel affected versions not specified Description: The issue is related to errors in handling objects in memory. It allows an attacker to elevate their privileges by executing a specially crafted application, potentially leading to...

RUSTSEC-2020-0024 Improper uniqueness verification of signature threshold

The tough library, prior to 0.7.1, does not properly verify the uniqueness of keys in the signatures provided to meet the threshold of cryptographic signatures. It allows someone with access to a valid signing key to create multiple valid signatures in order to circumvent TUF requiring a minimum...