CVE-2020-13591

CVE-2020-13591 affects Rukovoditel Project Management App 2.7.2, in the authenticated/CSRF-possible SQL injection path on the “access_rules/rules_form” page. The root cause is an unsanitized entities_id parameter used in a SQL query, enabling an attacker with admin rights or via CSRF to craft req...

PT-2021-8263 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a resource leak in the lpspi prepare xfer hardware function of the Linux kernel. This leak occurs because pm runtime get sync increments the power management...

Memory Corruption Vulnerability in PM Designer of Pingtone Technology Co.

Ltd. is a professional HMI manufacturer headquartered in Taiwan that integrates R&D, production, manufacturing and sales. A memory corruption vulnerability exists in PM Designer, which can be exploited by attackers to cause the program to crash...

PT-2021-7604 · Unknown +1 · Cgal Libcgal +1

Name of the Vulnerable Software and Affected Versions: CGAL libcgal version 5.1.1 Description: The issue is related to the Nef polygon-parsing functionality in CGAL libcgal. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, potentially resulting in code...

PT-2021-7607 · Unknown +1 · Cgal Libcgal +1

Name of the Vulnerable Software and Affected Versions: CGAL libcgal version 5.1.1 Description: Multiple code execution vulnerabilities exist in the Nef polygon-parsing functionality. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code...

PT-2021-7589 · Unknown +1 · Cgal Libcgal +1

Name of the Vulnerable Software and Affected Versions: CGAL libcgal version 5.1.1 Description: The issue is related to multiple code execution vulnerabilities in the Nef polygon-parsing functionality of CGAL libcgal. A specially crafted malformed file can lead to an out-of-bounds read and type...

Memory Corruption Vulnerability in PM Designer V1.2.98.35 Processing PLF at Pingtone Technology Co.

Ltd. is a professional HMI manufacturer headquartered in Taiwan that integrates R&D, production, manufacturing and sales. A memory corruption vulnerability exists in PM Designer V1.2.98.35 Processing PLF of Pingtong Technology Co., Ltd. which can be exploited by attackers to cause the program to...

Memory Corruption Vulnerability in PLF Files for Processing Man Machine Applications in PM Designer V2.1.07.39 at Pingtong Technology Co.

Ltd. is a professional HMI manufacturer headquartered in Taiwan that integrates R&D, production, manufacturing and sales. A memory corruption vulnerability exists in the PLF file of the PM Designer V2.1.07.39 Processing HMI application of Pingtong Technology Co., Ltd. which can be exploited by...

Memory Corruption Vulnerability in PM Designer V1.2.98.35 at Pingtone Technology Co.

Ltd. is a professional HMI manufacturer headquartered in Taiwan that integrates R&D, production, manufacturing and sales. A memory corruption vulnerability exists in PM Designer V1.2.98.35 of Pingtone Technology Co. An attacker can exploit this vulnerability to cause the program to crash...

Memory Corruption Vulnerability in PM Designer V2.1.07.39 at Pingtone Technology Co.

Ltd. is a professional HMI manufacturer headquartered in Taiwan that integrates R&D, production, manufacturing and sales. A memory corruption vulnerability exists in PM Designer V2.1.07.39, which can be exploited by attackers to cause a denial of service attack...

Memory corruption vulnerability exists in PM Designer V1.2.98.35 of Pingtone Technology Co.(CNVD-2021-15521)

Ltd. is a professional HMI manufacturer headquartered in Taiwan that integrates R&D, production, manufacturing and sales. A memory corruption vulnerability exists in PM Designer V1.2.98.35 of Pingtone Technology Co. An attacker can exploit this vulnerability to cause the program to crash...

Binary Vulnerability in PM Designer V2.1.07.39 at Pingtone Technology Co.

Ltd. is a professional HMI manufacturer headquartered in Taiwan that integrates R&D, production, manufacturing and sales. A binary vulnerability exists in PM Designer V2.1.07.39 of Pingtong Technology Co., Ltd. which can be exploited by attackers to cause a program crash...

CVE-2020-26049

Nifty-PM CPE 2.3 is affected by stored HTML injection. The impact is remote arbitrary code execution...

CVE-2020-26049

Nifty-PM CPE 2.3 is affected by stored HTML injection. The impact is remote arbitrary code execution...

Design/Logic Flaw

Nifty-PM CPE 2.3 is affected by stored HTML injection. The impact is remote arbitrary code execution...

CVE-2020-26049

Nifty-PM CPE 2.3 is affected by stored HTML injection. The impact is remote arbitrary code execution...

CVE-2020-26049

CVE-2020-26049 affects Nifty-PM CPE 2.3 and is due to stored HTML injection in a component/feature, enabling remote arbitrary code execution as described in the CVE overview. The connected Red Hat advisory and NVD entries corroborate the impact as remote code execution via stored HTML injection. ...

PT-2020-16277

Name of the Vulnerable Software and Affected Versions Nifty-PM CPE version 2.3 Description The issue concerns stored HTML injection, which can lead to remote arbitrary code execution. Recommendations For Nifty-PM CPE version 2.3, update to a version that fixes the stored HTML injection issue to...

CVE-2020-26049: Improper Neutralization of Input During Web Page Generation

Nifty-PM CPE 2.3 is affected by stored HTML injection. The impact is remote arbitrary code execution...

CVE-2020-25096

LogRhythm Platform Manager PM 7.4.9 has Incorrect Access Control. Users within LogRhythm can be delegated different roles and privileges, intended to limit what data and services they can interact with. However, no access control is enforced for WebSocket-based communication to the PM application...