6773 matches found
PT-2021-15249 · Nextcloud +1 · Nextcloud +1
Name of the Vulnerable Software and Affected Versions: Nextcloud versions prior to 20.0.6 Description: A missing user check in Nextcloud inadvertently populates a user's own credentials for other users' external storage configuration when not already configured yet. Recommendations: For Nextcloud...
PT-2021-2251 · Cisco · Cisco Network Services Orchestrator
Name of the Vulnerable Software and Affected Versions: Cisco Network Services Orchestrator NSO affected versions not specified Description: A vulnerability in the API subsystem and web-management interface of Cisco Network Services Orchestrator NSO could allow an unauthenticated, remote attacker ...
PT-2021-15234 · Github · Github Enterprise Server
Name of the Vulnerable Software and Affected Versions: GitHub Enterprise Server versions 2.4.21 through 2.20.23 GitHub Enterprise Server versions 2.21.0 through 2.21.14 GitHub Enterprise Server versions 2.22.0 through 2.22.6 GitHub Enterprise Server versions 3.0.0 Description: An improper access...
ASB-A-168049957
Bulletin has no description...
PT-2021-7457
Name of the Vulnerable Software and Affected Versions underscore versions 1.3.2 through 1.12.1 underscore versions 1.13.0-0 through 1.13.0-2 Description The issue is related to the template function in the underscore library, which is used for working with arrays in JavaScript. It is caused by...
PT-2021-17045 · Synology · Synology Diskstation Manager
Name of the Vulnerable Software and Affected Versions: faad2 versions prior to 2.2.7.1 faad in Synology DiskStation Manager DSM versions prior to 6.2.3-25426-3 Description: The issue is related to a stack-based buffer overflow vulnerability and the use of unmaintained third-party components. This...
PT-2021-9432
Name of the Vulnerable Software and Affected Versions Apache Batik version 1.13 Description The issue is caused by improper input validation by the NodePickerPanel, allowing an attacker to exploit the vulnerability and cause the underlying server to make arbitrary GET requests. This can be achiev...
PT-2021-9721 · Red Hat +1 · Keycloak Gatekeeper +1
Name of the Vulnerable Software and Affected Versions: Keycloak Gatekeeper versions all Description: A vulnerability was found in Keycloak Gatekeeper where an attacker can bypass the Gatekeeper by using lower case HTTP headers, for example, via cURL. This issue is particularly problematic when th...
PT-2021-3622
Name of the Vulnerable Software and Affected Versions MariaDB versions 10.2 through 10.2.37 MariaDB versions 10.3 through 10.3.28 MariaDB versions 10.4 through 10.4.18 MariaDB versions 10.5 through 10.5.9 Percona Server through 2021-03-03 wsrep patch through 2021-03-03 for MySQL Description The...
PT-2021-2348 · Advantech · Advantech Webaccess/Scada
Name of the Vulnerable Software and Affected Versions: Advantech WebAccess/SCADA version 9.0.1 Description: A local privilege elevation issue exists in the file system permissions of the installation, specifically in the webvrpcs Run Key Privilege Escalation. This allows an attacker to replace...
PT-2021-14397
Name of the Vulnerable Software and Affected Versions: Fleet versions prior to 3.7.0 Description: The issue allows a malicious actor with a valid node key to send a badly formatted request, causing the Fleet server to exit and resulting in denial of service. This is only possible while a live que...
PT-2021-3172
Name of the Vulnerable Software and Affected Versions pug versions prior to 3.0.1 pug-code-gen versions prior to 2.0.3 Description The issue is related to the insufficient neutralization of special elements in the output of the Pug HTML preprocessor, specifically in the VisitMixin and...
September 8, 2020—KB4577015 (OS Build 14393.3930)
None None...
PT-2021-11118 · Siemens · Tia Portal +1
Name of the Vulnerable Software and Affected Versions: PCS neo Administration Console versions prior to V3.1 TIA Portal versions V15 through V16 Description: A vulnerability has been identified that could allow a local attacker to execute code with SYSTEM privileges by manipulating certain files ...
Intel® SGX Platform Advisory
Summary: A potential security vulnerability in the Intel® Software Guard Extensions SGX may allow information disclosure. Intel released firmware updates to mitigate this potential Vulnerability Details: CVEID: CVE-2020-24491 Description: Debug message containing addresses of memory transactions ...
PT-2021-2443
Name of the Vulnerable Software and Affected Versions: Apache Tomcat versions 8.5.0 through 8.5.61 Apache Tomcat versions 9.0.0.M1 through 9.0.41 Apache Tomcat versions 10.0.0-M1 through 10.0.0 Description: The issue is related to the implementation of the HTTP/2 protocol in Apache Tomcat, which...
PT-2021-3513 · Autodesk · Autodesk Design Review
Name of the Vulnerable Software and Affected Versions: Autodesk Design Review versions 2011 through 2018 Description: A Type Confusion issue occurs when processing a maliciously crafted PDF file, allowing a malicious actor to execute arbitrary code. The vulnerability is related to errors in data...
CVE-2020-35753
The job posting recommendation form in Persis Human Resource Management Portal Versions 17.2.00 through 17.2.35 and 19.0.00 through 19.0.20, when the "Recommend job posting" function is enabled, allows XSS via the SENDER parameter...
PT-2021-2884
Name of the Vulnerable Software and Affected Versions SonicWall SSLVPN SMA100 versions 10.x Description The issue is related to a SQL Injection vulnerability in the SonicWall SSLVPN SMA100 product. This vulnerability allows a remote unauthenticated attacker to perform SQL queries to access...
