211 matches found
PT-2022-23926 · Unknown · Seccome Ehoney
Name of the Vulnerable Software and Affected Versions: seccome Ehoney affected versions not specified Description: A critical issue was found, affecting some unknown functionality of the file "/api/v1/bait/set". The manipulation of the Payload argument leads to SQL injection. This issue can be...
PT-2022-22682 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel affected versions not specified Description: A memory leak issue was found in the Linux Kernel, specifically in the mptcp addr show function of the ipmptcp.c file. This issue can be exploited remotely. Recommendations: At the...
PT-2022-26375 · Unknown · Pdf-Xchange Editor
Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a...
PT-2022-25802 · Unknown · Subassemblycomposer.Exe
Name of the Vulnerable Software and Affected Versions: SubassemblyComposer.exe affected versions not specified Description: A maliciously crafted PKT file consumed through the SubassemblyComposer.exe application could lead to memory corruption by read access violation. This issue, in conjunction...
PT-2022-22567 · Swftools · Swftools
Name of the Vulnerable Software and Affected Versions: SWFTools affected versions not specified Description: A heap-buffer overflow was discovered in SWFTools via the GfxICCBasedColorSpace::getDefaultColorGfxColor function at /xpdf/GfxState.cc. This issue is related to commit 772e55a2...
PT-2022-22556 · Swftools · Swftools
Name of the Vulnerable Software and Affected Versions: SWFTools affected versions not specified Description: A segmentation violation was discovered in SWFTools via the MovieAddFrame function at /src/gif2swf.c. Recommendations: At the moment, there is no information about a newer version that...
PT-2022-23646 · Samsung · Libsdkrecognitiontext.Spensdk.Samsung.So
Name of the Vulnerable Software and Affected Versions: libSDKRecognitionText.spensdk.samsung.so library affected versions not specified Description: A heap-based overflow issue in the prepareRecogLibrary function allows an attacker to cause a memory access fault. The estimated number of potential...
PT-2022-7714 · Ibm · Blackice Pc Protection
Name of the Vulnerable Software and Affected Versions: ISS BlackICE PC Protection affected versions not specified Description: A critical vulnerability was found in the Cross Site Scripting Detection component of ISS BlackICE PC Protection. The issue allows for privilege escalation through...
PT-2022-14285 · Unknown · Ccu Driver
Name of the Vulnerable Software and Affected Versions: ccu driver affected versions not specified Description: The issue is related to a possible memory corruption in the ccu driver due to an incorrect bounds check. This could lead to local escalation of privilege, requiring System execution...
PT-2022-1970 · Microsoft · Tablet Windows User Interface Application +1
Name of the Vulnerable Software and Affected Versions: Tablet Windows User Interface Application affected versions not specified Description: The issue is related to the use of a shared resource with incorrect synchronization in the Tablet Windows User Interface Application component of the...
PT-2022-15172 · Unknown +1 · Connected Devices Platform Service +1
Name of the Vulnerable Software and Affected Versions: Connected Devices Platform Service affected versions not specified Description: The issue is an elevation-of-privilege vulnerability that allows attackers to affect the system. No information is provided about the estimated number of...
PT-2022-12967 · Unknown · Livehelperchat
Name of the Vulnerable Software and Affected Versions: livehelperchat affected versions not specified Description: The issue concerns the generation of error messages that contain sensitive information. There is a noticeable difference in the error messages produced for existing and non-existing...
PT-2021-23397 · Unknown · Livehelperchat
Name of the Vulnerable Software and Affected Versions: livehelperchat affected versions not specified Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This means that the software does not properly neutralize use...
PT-2021-22983 · Tcman Gim · Tcman Gim
Name of the Vulnerable Software and Affected Versions: TCMAN GIM affected versions not specified Description: The issue is related to the lack of authorization checks when accessing certain resources. A remote attacker could exploit this to access URLs that require privileges without having them,...
PT-2021-22896 · Unknown · Livehelperchat
Name of the Vulnerable Software and Affected Versions: livehelperchat affected versions not specified Description: The issue is related to Cross-Site Request Forgery CSRF, which allows an attacker to log out a user if the logged-in user visits the attacker's website. This cannot harm the user's...
PT-2021-5051 · Microsoft · Azure Sphere
Name of the Vulnerable Software and Affected Versions: Azure Sphere affected versions not specified Description: The issue is related to a lack of protection for service data in the Azure Sphere operating system. Exploitation of this issue may allow an attacker to gain unauthorized access to...
PT-2021-4693 · Microsoft · Exchange Server
Name of the Vulnerable Software and Affected Versions: Microsoft Exchange Server affected versions not specified Description: The issue is related to insufficient input validation in Microsoft Exchange Server, which can be exploited by a remote attacker to cause a denial of service...
PT-2021-4391 · Microsoft · Windows Common Log File System Driver +1
Name of the Vulnerable Software and Affected Versions: Windows Common Log File System Driver affected versions not specified Description: The issue is related to errors in privilege management. It allows an attacker to gain system privileges. Recommendations: At the moment, there is no informatio...
PT-2021-6972 · Microsoft · Windows Wlan Autoconfig Service +1
Name of the Vulnerable Software and Affected Versions: Windows WLAN AutoConfig Service versions affected versions not specified Description: The issue is related to a lack of protection for service data in the Windows WLAN AutoConfig service of the Microsoft Windows operating system. This allows ...
PT-2021-3009 · Microsoft · Web Media Extensions
Name of the Vulnerable Software and Affected Versions: Web Media Extensions affected versions not specified Description: The issue is related to incorrect code generation management in the Web Media Extensions package, allowing an attacker to execute arbitrary code. Recommendations: At the moment...