PT-2019-7746 · Headway · Headway

Name of the Vulnerable Software and Affected Versions: Headway theme versions prior to 3.8.9 Description: The issue concerns a Cross-Site Scripting XSS flaw. This type of flaw occurs when an application includes user input in its output without proper validation or encoding, allowing an attacker ...

PT-2021-10721 · FFmpeg +4 · Ffmpeg +4

Name of the Vulnerable Software and Affected Versions: FFmpeg version 4.2 Description: A Denial of Service issue exists due to a memory leak at the fifo alloc common function in libavutil/fifo.c. Recommendations: For FFmpeg version 4.2, consider updating to a newer version to mitigate the risk,...

PT-2019-5517 · Openwrt · Openwrt

Name of the Vulnerable Software and Affected Versions: OpenWrt versions 15.05.1 through 18.06.4 Description: The issue is related to errors in the certificate authentication procedure of the Ustream-SSL library in OpenWrt. This can be exploited by a remote attacker to perform a man-in-the-middle...

PT-2019-14599

Name of the Vulnerable Software and Affected Versions OpenCV version 4.1.1 Description The issue is related to an out-of-bounds read in the hal baseline::v load function located in core/hal/intrin sse.hpp, which is called from computeSSDMeanNorm in modules/video/src/dis flow.cpp. Recommendations...

PT-2019-5212 · WordPress · Wordpress

Name of the Vulnerable Software and Affected Versions: WordPress versions prior to 5.2.3 Description: The issue is related to incorrect URL sanitization in the wp kses bad protocol once function, which can lead to cross-site scripting XSS attacks. This could allow a remote attacker to compromise...

PT-2019-5220 · WordPress · Wordpress

Name of the Vulnerable Software and Affected Versions: WordPress versions prior to 5.2.4 Description: The issue is related to a stored XSS cross-site scripting vulnerability via the Customizer. This vulnerability can be exploited by a remote attacker to impact data integrity. Recommendations: For...

PT-2019-6285 · Nlnet +8 · Unbound +8

Name of the Vulnerable Software and Affected Versions: Unbound versions prior to 1.9.5 Description: The issue is related to an integer overflow in the regional allocator via the regional alloc function in the util/regional.c component of the Unbound DNS server. This could potentially allow a remo...

PT-2019-14504 · Symonics +2 · Libmysofa +2

Name of the Vulnerable Software and Affected Versions: Symonics libmysofa version 0.7 Description: The issue is related to an invalid read in the getDimension function located in hrtf/reader.c. This problem can lead to unintended behavior. Recommendations: For Symonics libmysofa version 0.7,...

PT-2019-3056 · Cisco · Cisco Integrated Management Controller (Imc)

Name of the Vulnerable Software and Affected Versions: Cisco Integrated Management Controller IMC Software affected versions not specified Description: A vulnerability in the web-based management interface of Cisco Integrated Management Controller IMC Software could allow an authenticated, remote...

PT-2019-17791 · Rapid7 · Insightappsec

Name of the Vulnerable Software and Affected Versions: Rapid7 InsightAppSec versions 2019.06.24 and prior Description: The issue is related to a DLL injection vulnerability in the 'prunsrv.exe' component. A local user who is already authenticated to the operating system can exploit this to elevat...

PT-2019-3026 · Microsoft · Hyper-V +1

Name of the Vulnerable Software and Affected Versions: Microsoft Hyper-V affected versions not specified Description: A denial of service issue exists due to insufficient input validation on the host server. This could allow a remote attacker to cause a denial of service using a specially crafted...

PT-2019-2992 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: An information disclosure issue exists due to the Windows kernel's improper handling of objects in memory. This could allow an attacker to obtain information that could be used to further...

PT-2019-13329 · Floragunn · Search Guard

Name of the Vulnerable Software and Affected Versions: Search Guard versions prior to 24.0 Description: The issue concerns field caps and mapping API leaking field names, but not values, for fields that are not allowed for the user when field level security FLS is activated. This occurs in Search...

PT-2019-3069 · Cisco · Cisco Ios Xr

Name of the Vulnerable Software and Affected Versions: Cisco IOS XR Software versions prior to Release 6.6.3 Description: A vulnerability in the implementation of the Intermediate System-to-Intermediate System IS-IS routing protocol functionality could allow an unauthenticated attacker who is in...

PT-2019-3131 · Cisco · Cisco Firepower Management Center

Name of the Vulnerable Software and Affected Versions: Cisco Firepower Management Center affected versions not specified Description: The issue is related to insufficient validation of user-supplied input in the web-based management interface, which could allow a remote attacker to conduct a...

PT-2019-17686 · Unknown · Min-Http-Server

Name of the Vulnerable Software and Affected Versions: min-http-server all versions Description: A cross-site scripting XSS issue allows an attacker with access to the server file system to execute arbitrary JavaScript code in a victim's browser. The package fails to sanitize filenames, enabling...

PT-2019-13141 · Nats · Nats Server

Name of the Vulnerable Software and Affected Versions: NATS Server versions prior to 2.2.0 Description: The issue is caused by an integer overflow that allows a remote attacker to crash the server by sending a crafted request. If authentication is enabled, the attacker must first authenticate. Th...

PT-2019-9616 · Gnuboard · Gnuboard5

Name of the Vulnerable Software and Affected Versions: GNUBOARD5 version 5.3.1.9 Description: The issue allows remote attackers to inject arbitrary web script or HTML via the Extra Contents parameter, also known as the cf 110 parameter in the adm/config form update.php file. This enables attacker...

PT-2019-11539 · Kubernetes · Helm

Name of the Vulnerable Software and Affected Versions: helm versions prior to 2.7.2 Description: The issue concerns improper certificate validation, allowing unauthorized clients to connect to the server because self-signed client certificates were allowed. A malicious client could exploit this b...

PT-2019-13425 · Ping Identity · Ping Identity Agentless Integration Kit

Name of the Vulnerable Software and Affected Versions: Ping Identity Agentless Integration Kit versions prior to 1.5 Description: The issue is related to a Reflected Cross-site Scripting XSS problem. There is no information provided about the estimated number of potentially affected devices...