434 matches found
PT-2023-13770 · Moodle +1 · Moodle +1
Name of the Vulnerable Software and Affected Versions: Moodle affected versions not specified Description: The issue is related to insufficient limitations in some quiz web services, allowing students to bypass sequential navigation during a quiz attempt. Recommendations: At the moment, there is ...
ASB-A-160605508
Bulletin has no description...
PT-2020-3907 · Microsoft · Sharepoint Foundation +1
Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Foundation affected versions not specified Microsoft SharePoint Enterprise Server affected versions not specified Description: A remote code execution issue exis...
PT-2020-3680 · Microsoft · Windows Work Folder Service +1
Name of the Vulnerable Software and Affected Versions: Windows Work Folders Service affected versions not specified Description: The issue is related to an elevation of privilege vulnerability. It occurs when the Windows Work Folders Service improperly handles memory. To exploit this, an attacker...
PT-2020-3838 · Microsoft · Windows Backup Engine +1
Name of the Vulnerable Software and Affected Versions: Windows Backup Engine affected versions not specified Description: The issue is related to an elevation of privilege vulnerability that exists when the Windows Backup Engine improperly handles memory. To exploit this, an attacker would first...
PT-2020-13259 · Comodo +1 · Combodo Itop +1
Name of the Vulnerable Software and Affected Versions: Combodo iTop affected versions not specified Description: The issue is related to Broken Access Control in a function within Combodo iTop. This allows an unauthorized attacker to inject commands and disclose system information. Recommendation...
PT-2020-3985 · Microsoft · Windows +1
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to an elevation of privilege vulnerability that exists when DirectX improperly handles objects in memory. This could allow an attacker to run arbitrary code in kernel...
PT-2022-8867 · Radare2 +1 · Radare2 +1
Name of the Vulnerable Software and Affected Versions: radare2 affected versions not specified Description: A flaw was found in radare2 due to a mismatched array length in core java.c, which could allow an attacker to cause a crash and perform a denial of service attack. Recommendations: At the...
metasploit-framework
This is an exploit module for the Metasploit Framework, a penetration testing tool. The module is designed to exploit a vulnerability in a specific target, but the exact target and vulnerability are not specified in the provided code. The module is written in Ruby and uses the Metasploit framewor...
PT-2019-12565 · Microsoft · Browsers +2
Name of the Vulnerable Software and Affected Versions: Microsoft browsers affected versions not specified Description: A remote code execution issue exists in the way Microsoft browsers access objects in memory, potentially allowing an attacker to execute arbitrary code in the context of the...
PT-2019-2607 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in the Windows AppX Deployment Service AppXSVC due to improper handling of hard links. This vulnerability can be...
PT-2019-11716 · Jenkins · Jenkins Koji Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Koji Plugin affected versions not specified Description: The issue concerns the Jenkins Koji Plugin, which disables SSL/TLS and hostname verification globally for the Jenkins master JVM. This means the plugin unconditionally disables...
PT-2018-3321 · Tp Link · Tp-Link Tl-R600Vpn
Name of the Vulnerable Software and Affected Versions: TP-Link TL-R600VPN affected versions not specified Description: A remote code execution issue exists in the HTTP header-parsing function of the TP-Link TL-R600VPN HTTP Server. This is caused by a buffer overflow when a specially crafted HTTP...
PT-2018-16159 · Bracket · Bracket-Template
Name of the Vulnerable Software and Affected Versions: bracket-template affected versions not specified Description: The issue is related to reflected XSS, which can occur when a variable passed via a GET parameter is used in a template. Recommendations: At the moment, there is no information abo...
PT-2022-10319 · Alt +1 · Alt Linux
Name of the Vulnerable Software and Affected Versions: ALT Linux affected versions not specified Description: General information about the issue is not provided. There is no information about the estimated number of potentially affected devices worldwide or details about real-world incidents whe...
PT-2018-4064 · Manageiq · Manageiq Evm
Name of the Vulnerable Software and Affected Versions: ManageIQ Enterprise Virtualization Manager EVM affected versions not specified Description: A cross-site request forgery CSRF issue allows remote attackers to hijack user authentication for requests with unspecified impact. The exact vectors...
PT-2018-5001 · Antenna House · Antenna House Dmc Htmlfilter
Name of the Vulnerable Software and Affected Versions: AntennaHouse DMC HTMLFilter affected versions not specified Description: An exploitable heap corruption issue exists in the DHFSummary functionality. Recommendations: At the moment, there is no information about a newer version that contains ...
PT-2018-2606 · Moxa · Moxa Eds +1
Name of the Vulnerable Software and Affected Versions: Moxa IKS and EDS affected versions not specified Description: The issue is related to a failure in properly checking array bounds, which may allow an attacker to read device memory at arbitrary addresses. This could potentially lead to the...
PT-2018-5107 · Xmlsoft +1 · Libxml2 +1
Name of the Vulnerable Software and Affected Versions: libxml2 affected versions not specified Description: The issue allows context-dependent attackers to cause a denial of service stack consumption via a crafted XML document. This problem exists due to an incorrect fix for a previous issue...
PT-2016-2986 · Adobe +3 · Flash Player +3
Name of the Vulnerable Software and Affected Versions: Adobe Flash Player affected versions not specified Description: The issue is caused by a buffer overflow in memory, allowing a remote attacker to potentially execute arbitrary code or cause a denial of service memory corruption...