PT-2019-1922 · Mysql Server +5 · Mysql Server +5

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.15 and prior Description: The issue is related to insufficient access control in the MySQL Server component, specifically in the Optimizer subsystem. This can be exploited by a remote attacker to cause a denial of...

PT-2019-9289 · WordPress · Wp All Import

Name of the Vulnerable Software and Affected Versions: WP All Import plugin version 3.4.9 Description: The issue concerns multiple XSS vulnerabilities. These can be accessed via the "action=template" endpoint. It's worth noting that the vendor disputes this being a vulnerability, citing that WP A...

PT-2019-9290 · WordPress · Wp All Import

Name of the Vulnerable Software and Affected Versions: WP All Import plugin version 3.4.9 Description: The issue concerns an XSS vulnerability via the pmxi-admin-import custom type. It is noted that the vendor disputes this being a vulnerability, citing that WP All Import can only be used by a...

PT-2019-2752 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.0.8 Description: The issue is related to the implementation of the Siemens R3964 protocol driver in the Linux kernel, specifically in the drivers/tty/n r3964.c file. It involves errors in synchronization when...

PT-2019-2967 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions 2.6 Description: A double-free issue exists in the idr remove all function in lib/idr.c. This can be exploited by an unprivileged local attacker to potentially escalate privileges or cause a system crash, resulting in a...

PT-2019-8138 · Synology · Synology Diskstation Manager

Name of the Vulnerable Software and Affected Versions: Synology DiskStation Manager DSM versions prior to 6.1.4-15217-3 Description: A cross-site scripting XSS issue exists, allowing remote authenticated users to inject arbitrary web script or HTML. This is due to insufficient validation of user...

WordPress WP-Forum 1.7.8 Database Disclosure

Exploit Title : WordPress 2.0.2 WP-Forum Plugins 1.7.8 Database Disclosure Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 27/03/2019 Vendor Homepage : wordpress.org Software Information Link :...

PT-2019-19341 · Cms Made Simple · Cms Made Simple

Name of the Vulnerable Software and Affected Versions: CMS Made Simple version 2.2.8 Description: An issue was discovered in the FilePicker module, where it is possible to reach an unserialize call with an untrusted parameter, achieving authenticated object injection. Recommendations: For CMS Mad...

PT-2019-16860 · Ibm · Ibm Websphere Application Server

Name of the Vulnerable Software and Affected Versions: IBM WebSphere Application Server versions 7.0 through 9.0 Description: The issue is caused by improper handling of request headers, allowing a remote attacker to exploit it and cause memory consumption, leading to a denial of service...

PT-2019-1634 · Openwsman +3 · Openwsman +3

Name of the Vulnerable Software and Affected Versions: Openwsman versions up to and including 2.6.9 Description: The issue allows a remote, unauthenticated attacker to disclose arbitrary files by sending a specially crafted HTTP request to the openwsman server. This is due to the working director...

PT-2019-1633 · Openwsman +5 · Openwsman +5

Name of the Vulnerable Software and Affected Versions: Openwsman versions up to and including 2.6.9 Description: The issue is related to an infinite loop in the process connection function when parsing specially crafted HTTP requests, such as /api/v1/login. A remote, unauthenticated attacker can...

PT-2019-16874 · Ibm · Ibm Sterling B2B Integrator

Name of the Vulnerable Software and Affected Versions: IBM Sterling B2B Integrator versions 5.2.0.1 through 6.0.0.0 Standard Edition Description: The issue allows highly sensitive information to be transmitted in plain text. An attacker could obtain this information using man-in-the-middle...

PT-2019-1447

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint versions prior to the fixed version Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Foundation 2013 Microsoft SharePoint Server 2010, 2019 Description A remote code execution vulnerability exists in...

PT-2019-6320 · Usbguard +8 · Usbguard +8

Name of the Vulnerable Software and Affected Versions: USBGuard versions prior to 1.1.0 Description: The issue is related to an access error in the usbguard-dbus daemon of the USBGuard software, which allows an unprivileged user to connect USB devices. This could enable an attacker to access...

PT-2019-18535 · Zoneminder +3 · Zoneminder +3

Name of the Vulnerable Software and Affected Versions: ZoneMinder versions prior to 1.32.4 Description: A Reflected Cross Site Scripting issue exists, allowing an attacker to execute HTML or JavaScript code via a vulnerable show parameter value in the "view frame" frame.php due to omitted proper...

PT-2019-18337 · Zoneminder +3 · Zoneminder +3

Name of the Vulnerable Software and Affected Versions: ZoneMinder version 1.32.3 Description: An issue exists in the software where Reflected XSS is present in the web/skins/classic/views/plugin.php file via the pl parameter in the /zm/index.php?view=plugin API endpoint. Recommendations: For...

PT-2019-18104

Name of the Vulnerable Software and Affected Versions cairo version 1.16.0 Description An issue was discovered in the function cairo arc in direction in the file cairo-arc.c, which is related to an assertion problem. Recommendations For cairo version 1.16.0, consider restricting access to the cai...

PT-2019-4614 · FFmpeg +3 · Ffmpeg +3

Name of the Vulnerable Software and Affected Versions: FFmpeg versions 3.2 through 4.1 Description: The issue is related to a denial of service in the subtitle decoder, allowing attackers to consume excessive CPU resources via a crafted video file in Matroska format. This is due to the ff...

PT-2019-9961 · Dolibarr · Dolibarr

Name of the Vulnerable Software and Affected Versions: Dolibarr version 8.0.2 Description: A SQL injection issue allows remote authenticated users to execute arbitrary SQL commands via the employee parameter in the user/card.php file. Recommendations: For Dolibarr version 8.0.2, consider...

PT-2018-14577 · Microstrategy · Microstrategy Analytics

Name of the Vulnerable Software and Affected Versions: Microstrategy Analytics versions prior to 10.4.0026.0049 Description: The issue concerns a CSRF problem in the main.aspx file. The vendor has provided documentation for preventing CSRF attacks, but there is a disagreement on whether this issu...