136 matches found
PT-2021-5452 · Foxit · Foxit Pdf Reader +1
Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader affected versions not specified Foxit PhantomPDF affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations. User interaction is required, where...
PT-2021-3269 · Microsoft · Sharepoint Server +1
Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Foundation affected versions not specified Microsoft SharePoint Enterprise Server affected versions not specified Description: The vulnerability is related to a...
PT-2021-11749 · Wondercms · Wondercms
Name of the Vulnerable Software and Affected Versions: WonderCMS version 3.1.3 Description: A server-side request forgery SSRF vulnerability in the addCustomThemePluginRepository function in index.php allows remote attackers to execute arbitrary code via a crafted URL to the theme/plugin installe...
PT-2021-17861 · Seo Panel · Seo Panel
Name of the Vulnerable Software and Affected Versions: SEO Panel version 4.8.0 Description: The issue concerns a time-based blind SQL injection vulnerability in the order col parameter of the archive.php file. This vulnerability allows an attacker to retrieve all databases. Recommendations: For S...
PT-2020-8698 · Ecryptfs +1 · Ecryptfs +1
Name of the Vulnerable Software and Affected Versions: Samsung mobile devices with M6.0 except MSM8909 SC77xx/9830 exynos3470/5420 Samsung mobile devices with N7.0 except MSM8939 Samsung mobile devices with N7.1 except MSM8996 SDM6xx/M6737T Samsung mobile devices with N7.x except exynos9610/9820...
PT-2020-20566 · Proftpd +2 · Proftpd +2
Name of the Vulnerable Software and Affected Versions: ProFTPD version 1.3.7 Description: The issue is an out-of-bounds OOB read vulnerability in the mod cap module via the cap to text function in cap text.c. Recommendations: For ProFTPD version 1.3.7, consider disabling the mod cap module until ...
PT-2022-26810 · Gpac +2 · Gpac +2
Name of the Vulnerable Software and Affected Versions: GPAC version 2.1-DEV-rev368-gfd054169b-master Description: A memory leak was discovered in GPAC via the component gf list new at utils/list.c. Recommendations: For GPAC version 2.1-DEV-rev368-gfd054169b-master, consider restricting access to...
PT-2023-15166 · Unknown +2 · Gpac Mp4Box +2
Name of the Vulnerable Software and Affected Versions: GPAC MP4box version 2.1-DEV-rev574-g9d5bb184b Description: The issue is related to a heap use-after-free vulnerability. It occurs via the file filters/dmx m2ts.c at line 470 in the m2tsdmx declare pid function. This vulnerability can be...
PT-2023-15458 · Unknown +1 · Gpac Mp4Box +1
Name of the Vulnerable Software and Affected Versions: GPAC MP4Box version 2.1-DEV-rev649-ga8f438d20 Description: The issue is caused by infinite recursion in the Media GetSample function, located in isomedia/media.c:662, leading to a segment fault or stack overflow. Recommendations: For GPAC...
PT-2018-14844 · Ethereumjs · Ethereumjs-Vm
Name of the Vulnerable Software and Affected Versions: ethereumjs-vm version 2.4.0 Description: The issue allows attackers to cause a denial of service, leading to vm.runCode failure and REVERT, via a code attribute set to Buffer.frommy code, 'hex'. It's worth noting that the vendor disputes this...
PT-2018-16284 · Yi · Yi Home Camera
Name of the Vulnerable Software and Affected Versions: Yi Home Camera 27US version 1.8.7.0D Description: A firmware downgrade vulnerability exists in the firmware update functionality. A specially crafted file can cause a logic flaw, resulting in a firmware downgrade. An attacker can insert an SD...
PT-2018-5977 · Apache · Apache Qpid Dispatch Router
Name of the Vulnerable Software and Affected Versions: Apache Qpid Dispatch Router versions 0.7.0 through 0.8.0 Description: A Denial of Service issue was found in the software. To exploit this, a remote user must establish an AMQP connection to the Qpid Dispatch Router and send a specifically...
PT-2017-13459 · D Link · D-Link Dir-850L
Name of the Vulnerable Software and Affected Versions: D-Link DIR-850L REV. A versions through FW114WWb07 h2ab beta1 Description: The issue concerns a problem where an attacker can execute malicious scripts. This is possible due to the presence of a cross-site scripting XSS flaw in the action...
PT-2016-6898 · Cisco · Cisco Asa
Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software versions 8.4.7.29 through 9.1.7.4 Description: A denial of service issue exists due to the improper handling of DHCP packets by the DHCP Relay feature. This can be exploited by an unauthenticated...
PT-2013-1834 · Cisco · Cisco Asa
Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliances ASA devices versions 8.x through 8.41 Description: The issue is related to improper management of SSH sessions, which allows remote authenticated users to cause a denial of service device crash by establishi...
PT-2007-3644 · Bloofox · Bloofoxcms
Name of the Vulnerable Software and Affected Versions: BlooFoxCMS version 0.2.2 Description: The issue concerns a PHP remote file inclusion vulnerability in the install/index.php file of BlooFoxCMS. This vulnerability potentially allows remote attackers to execute arbitrary PHP code via a URL in...