PT-2020-6068 · Npm · Axios

Name of the Vulnerable Software and Affected Versions: Axios NPM package version 0.21.0 Description: The issue is related to insufficient validation of incoming requests in the Axios library, which can be exploited by a remote attacker to perform a Server-Side Request Forgery SSRF attack. This...

PT-2020-5992 · Oracle +9 · Mysql Server +8

Name of the Vulnerable Software and Affected Versions: Oracle MySQL Server versions 5.7.33 and prior Oracle MySQL Server versions 8.0.23 and prior Description: The issue is related to insufficient input validation in the InnoDB component of Oracle MySQL Server. It allows a high-privileged attacke...

PT-2020-16526 · Ruckus · Ruckus Vriot

Name of the Vulnerable Software and Affected Versions: Ruckus vRioT versions 1.5.1.0.21 and earlier Description: The issue concerns an API backdoor that is hardcoded into the validate token.py file. This backdoor allows an unauthenticated attacker to interact with the service API by using a...

CVE-2020-15174

In Electron before versions 11.0.0-beta.1, 10.0.1, 9.3.0 or 8.5.1 the will-navigate event that apps use to prevent navigations to unexpected destinations as per our security recommendations can be bypassed when a sub-frame performs a top-frame navigation across sites. The issue is patched in...

3S CoDeSys (Update A)

1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION: Exploitable remotely/low skill level to exploit/public exploits are available Vendor: 3S-Smart Software Solutions Equipment: CoDeSys Vulnerabilities: Improper Access Control, Relative Path Traversal 2. UPDATE INFORMATION This updated advisory is a...

PT-2020-14619 · Gradle · Gradle Enterprise

Name of the Vulnerable Software and Affected Versions: Gradle Enterprise versions 2018.5 through 2020.2.4 Description: An issue allows a remote attacker with administrative access to perform server side request forgery when configuring Gradle Enterprise to integrate with a SAML identity provider...

PT-2020-14937 · Cellopoint · Cellopoint Cellos

Name of the Vulnerable Software and Affected Versions: Cellopoint Cellos version 4.1.10 Build 20190922 Description: The issue concerns improper validation of URL input. An attacker can manipulate the URL parameter using the cookie of an authenticated user to access arbitrary files on the system...

PT-2020-14834 · Philips · Philips Suresigns Vs4

Name of the Vulnerable Software and Affected Versions: Philips SureSigns VS4 versions A.07.107 and prior Description: The software does not restrict or incorrectly restricts access to a resource from an unauthorized actor. Recommendations: For Philips SureSigns VS4 versions A.07.107 and prior,...

PT-2020-14816 · Advantech · Advantech Webaccess Hmi Designer

Name of the Vulnerable Software and Affected Versions: Advantech WebAccess HMI Designer versions 2.1.9.31 and prior Description: A double free vulnerability exists due to the processing of specially crafted project files, which may allow remote code execution, disclosure or modification of...

PT-2020-6182

Name of the Vulnerable Software and Affected Versions OpenSSH versions through 8.3p1 OpenSSH affected versions not specified is also mentioned in relation to other products, but the primary focus is on OpenSSH through 8.3p1. Description The issue allows command injection in the scp.c toremove...

PT-2020-6445 · Citrix · Citrix Adc +2

Name of the Vulnerable Software and Affected Versions: Citrix ADC versions prior to 13.0-58.30 Citrix ADC versions prior to 12.1-57.18 Citrix ADC versions prior to 12.0-63.21 Citrix ADC versions prior to 11.1-64.14 Citrix ADC versions prior to 10.5-70.18 Citrix Gateway versions prior to 13.0-58.3...

PT-2020-14436

Name of the Vulnerable Software and Affected Versions QEMU version 4.2.0 Description A MemoryRegionOps object may lack read/write callback methods, leading to a NULL pointer dereference. Recommendations For QEMU version 4.2.0, at the moment, there is no information about a newer version that...

PT-2020-14439 · Ntop · Ndpi

Name of the Vulnerable Software and Affected Versions: nDPI versions 3.2 and earlier Description: The issue is related to a heap-based buffer over-read in the H.323 dissector, specifically in the ndpi search h323 function located in lib/protocols/h323.c. This occurs when a payload packet length i...

PT-2020-6771 · Zyxel · Zyxel Cloudcnm Secumanager

Name of the Vulnerable Software and Affected Versions: Zyxel CloudCNM SecuManager versions 3.1.0 through 3.1.1 Description: The issue is related to a lack of protection for the SQL query structure in the Zyxel CloudCNM SecuManager software. This can be exploited by a remote attacker to gain...

PT-2020-12991 · Philips · Earlyvue +3

Name of the Vulnerable Software and Affected Versions: Philips IntelliBridge Enterprise IBE versions B.12 and prior Description: The issue concerns the logging of unencrypted user credentials within the transaction logs of the IntelliBridge Enterprise system. These logs are secured behind a...

PT-2020-13614 · Tigera · Calico Enterprise +1

Name of the Vulnerable Software and Affected Versions: Calico versions 3.14.0 and below Calico Enterprise versions 2.8.2 and below Description: The issue allows a compromised pod with sufficient privilege to reconfigure the node's IPv6 interface, enabling the attacker to redirect network traffic...

PT-2020-5466 · Intel +6 · Dpdk +6

Name of the Vulnerable Software and Affected Versions: DPDK versions 19.11 and above Description: A vulnerability was found that allows a malicious container with direct access to the vhost-user socket to cause a resource leak by sending VHOST USER GET INFLIGHT FD messages. This can result in a...

colectiaestera.ro Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1164121 Security Researcher g0bl1nsec Helped patch 3768 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting colectiaestera.ro website...

gulfshoresmarina.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1161238 Security Researcher g0bl1nsec Helped patch 3768 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting gulfshoresmarina.com...

goldentimelogistics.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1160171 Security Researcher geeknik Helped patch 8815 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting goldentimelogistics.com...