PT-2019-14863

Name of the Vulnerable Software and Affected Versions PC Protect Antivirus version 4.14.31 Description The issue concerns weak folder permissions in the default installation directory of PC Protect Antivirus, allowing any user to modify the contents of the directory and its subfolders...

PT-2019-14986

Name of the Vulnerable Software and Affected Versions Valve Steam Client versions prior to 2019-09-12 Description The issue allows for the placement or appending of partially controlled filesystem content. This could be demonstrated through file modifications on Windows, specifically in the conte...

PT-2019-20143

Name of the Vulnerable Software and Affected Versions Steam Client versions prior to 2019-09-12 Description The issue allows for the placement or appending of partially controlled filesystem content. This could be demonstrated by file modifications on Windows in the context of NT AUTHORITYSYSTEM,...

PT-2019-9872

Name of the Vulnerable Software and Affected Versions Corsair Link version 4.9.7.35 Description The issue is related to the "CLink4Service" service, which is installed with insecure permissions by default. This allows unprivileged users to take control of the service and execute commands in the...

PT-2019-14342

Name of the Vulnerable Software and Affected Versions CloudBerry Backup version 6.1.2.34 Description The issue allows local privilege escalation via a Pre or Post backup action. With only user-level access, a user can modify the backup plan and add a Pre backup action script that executes on beha...

PT-2019-14045

Name of the Vulnerable Software and Affected Versions Valve Steam Client for Windows versions through 2019-08-20 Description The issue is related to weak folder permissions, which can lead to privilege escalation to NT AUTHORITYSYSTEM. This can be achieved through crafted use of...

PT-2019-14044

Name of the Vulnerable Software and Affected Versions Valve Steam Client for Windows versions prior to 2019-08-16 Description The issue allows local users to escalate privileges to NT AUTHORITYSYSTEM. This is possible because local users can replace the current versions of SteamService.exe and...

PT-2019-13001

Name of the Vulnerable Software and Affected Versions SailPoint Desktop Password Reset version 7.2 Description An unauthenticated privilege escalation issue exists, allowing a user with local access to the Windows logon screen to escalate their privileges to NT AUTHORITYSystem. To exploit this, a...

PT-2019-13903

Name of the Vulnerable Software and Affected Versions Netwrix Auditor versions prior to 9.8 Description The issue is related to insecure permissions on certain directories and sub-folders, specifically %PROGRAMDATA%Netwrix AuditorLogsActiveDirectory. The Netwrix.ADA.StorageAuditService service,...

PT-2019-13811

Name of the Vulnerable Software and Affected Versions Valve Steam Client for Windows versions prior to 2019-08-07 Description The issue allows local users to gain NT AUTHORITYSYSTEM access due to explicit "Full control" for the Users group in the HKLMSOFTWAREWow6432NodeValveSteam registry key...

PT-2019-13091

Name of the Vulnerable Software and Affected Versions Artica Pandora FMS versions 7.0 NG before 735 Description The issue is related to improper permissions on the C:PandoraFMS directory and its sub-folders, allowing standard users to create new files. When the Apache service httpd.exe receives w...

PT-2019-12649

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Desktop Central versions 10.0.380 Zoho ManageEngine EventLog Analyzer versions 12.0.2 Zoho ManageEngine ServiceDesk Plus versions 10.0.0 Zoho ManageEngine SupportCenter Plus versions 8.1 Zoho ManageEngine O365 Manager Plus...

PT-2019-9591

Name of the Vulnerable Software and Affected Versions KioWare Server versions 4.9.6 and older Description The issue concerns weak folder permissions in the default installation directory, granting any user full access to the directory and its sub-folders. Additionally, a service called KWSService...

PT-2019-19826

Name of the Vulnerable Software and Affected Versions Shanda MapleStory Online version V160 Description The issue arises from the SdoKeyCrypt.sys driver, which fails to validate the IOCtl 0x8000c01c input value. This oversight leads to an integer signedness error and a heap-based buffer underflow...

PT-2018-15037

Name of the Vulnerable Software and Affected Versions OSSEC versions through 3.1.0 Description The issue allows local users to gain NT AUTHORITYSYSTEM access via Directory Traversal by leveraging full access to the associated OSSEC server. Recommendations For OSSEC versions through 3.1.0, update ...

PT-2018-5398

Name of the Vulnerable Software and Affected Versions: Kaseya Virtual System Administrator versions 9.3.0.11 and earlier Description: The issue is related to a Time of Check & Time of Use TOCTOU vulnerability. This vulnerability can be exploited by winning a race condition when the Kaseya Virtual...

PT-2018-18096

Name of the Vulnerable Software and Affected Versions PureVPN versions through 5.19.4.0 Description An issue was discovered where the client installation grants the Everyone group Full Control permission to the installation directory. The PureVPNService.exe service, which runs under NT...

PT-2018-17573

Name of the Vulnerable Software and Affected Versions SUPERAntiSpyware Professional Trial version 6.0.1254 Description The issue arises from the SASKUTIL.SYS driver in SUPERAntiSpyware Professional Trial, which allows privilege escalation to NT AUTHORITYSYSTEM. This is due to the driver not...

Disk Pulse Enterprise GET Buffer Overflow

A buffer overflow vulnerability exists in the web server component of Disk Pulse Enterprise Server. The vulnerability is due to insufficient bounds check. Successful exploitation of the vulnerability may cause code execution under Windows NT AUTHORITYSYSTEM account...

PT-2017-7898

Name of the Vulnerable Software and Affected Versions Avira Antivirus engine versions prior to 8.3.36.60 Description The issue allows remote code execution as NT AUTHORITYSYSTEM. This is caused by an integer overflow and heap-based buffer underflow resulting from a section header with a very larg...