Cacti 1.2.x < 1.2.17 Multiple Vulnerabilities - Windows

Cacti is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2021-2114 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 17.4R3-S3 Junos OS versions 18.1R3 between 18.1R3-S6 and 18.1R3-S11 Junos OS versions prior to 18.2R3-S6 Junos OS versions prior to 18.3R3-S4 Junos OS versions prior to 18.4R2-S5 Junos OS versions prior to 18.4R3-S6...

PT-2021-2118 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 15.1R7-S8 Juniper Networks Junos OS 15.1X49 versions prior to 15.1X49-D230 Juniper Networks Junos OS 17.3 versions prior to 17.3R3-S9 Juniper Networks Junos OS 17.4 versions prior to 17.4R2-S12,...

KLA12207 Security UI vulnerability in Cisco Jabber

A security UI vulnerability was found in Cisco Jabber. Malicious users can exploit this vulnerability to obtain sensitive information, spoof user interface. Original advisories Cisco Jabber and Webex Client Software Shared File Manipulation Vulnerability Related products Cisco-Jabber CVE list...

PT-2021-21416 · Qpdf +4 · Qpdf +4

Name of the Vulnerable Software and Affected Versions: QPDF versions 9.x through 9.1.1 QPDF versions 10.x through 10.0.4 Description: The issue is a heap-based buffer overflow in Pl ASCII85Decoder::write, which is called from Pl AES PDF::flush and Pl AES PDF::finish, occurring when a certain...

PT-2020-9351 · Dropbear +1 · Dropbear +1

Name of the Vulnerable Software and Affected Versions: Dropbear versions 2011.54 through 2018.76 Description: The issue is related to an inconsistent failure delay that may lead to revealing valid usernames. Recommendations: For versions 2011.54 through 2018.76, update to a version that addresses...

PT-2020-6429 · Otrs Ag +1 · Otrs +2

Name of the Vulnerable Software and Affected Versions: OTRS AG OTRS Community Edition versions 6.0.1 and later OTRS AG OTRS versions 7.0.x through 7.0.26 OTRS AG OTRS versions 8.0.x through 8.0.13 Description: The issue is related to deficiencies in handling exceptional states in the OTRS ticket...

MediaWiki < 1.31.11, 1.32 < 1.35.1 Multiple Vulnerabilities - Windows

MediaWiki is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mediawiki:mediawiki"; ifdescripti...

Medium: tomcat8

Issue Overview: While investigating bug 64830 it was discovered that Apache Tomcat 10.0.0-M1 to 10.0.0-M9, 9.0.0-M1 to 9.0.39 and 8.5.0 to 8.5.59 could re-use an HTTP request header value from the previous stream received on an HTTP/2 connection for the request associated with the subsequent...

CVE-2020-8935

CVE-2020-8935 describes an arbitrary memory overwrite in Asylo up to version 0.6.0 . An attacker can abuse the Ecall_restore path to reallocate untrusted code and overwrite sections of enclave memory. Practical impact: compromise of enclave memory integrity and confidentiality, with high-severity...

PT-2020-5284 · Linux +6 · Linux Kernel +6

Name of the Vulnerable Software and Affected Versions: Linux kernel versions through 5.10.1 Xen versions through 4.14.x Description: An issue in the Linux kernel PV block backend may cause a pointer to be re-used after it was freed. This occurs when the kernel thread handler does not have time to...

PT-2020-17263 · Phpldapadmin +1 · Phpldapadmin +1

Name of the Vulnerable Software and Affected Versions: phpLDAPadmin versions prior to 1.2.6.2 Description: A cross-site scripting XSS issue has been found that allows users to store malicious values, which may be executed by other users at a later time. This issue is related to the get request in...

PT-2020-6650 · Linux +7 · Linux Kernel +7

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.10.6 Description: The issue is related to the FUSE filesystem implementation in the Linux kernel. It causes a system crash due to fuse do getattr calling make bad inode in inappropriate situations. The...

Adobe Lightroom Classic Arbitrary Code ExecutionVulnerability - Windows

Adobe Lightroom Classic is prone to an arbitrary code execution vulnerability. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program ...

PT-2020-19348 · Avaya · Avaya Weblm

Name of the Vulnerable Software and Affected Versions: Avaya WebLM versions 7.0 through 7.1.3.6 Avaya WebLM versions 8.0 through 8.1.2 Description: An XML external entity XXE vulnerability in the Avaya WebLM admin interface allows authenticated users to read arbitrary files or conduct server-side...

Vulnerabilities fixed in Microsoft Browsers

There are several vulnerabilities in Microsoft Browsers. The vulnerabilities allow a malicious person to execute arbitrary execute code with user privileges and elevated privileges. For vulnerabilities CVE-2020-17058, CVE-2020-17052, CVE-2020-17053, CVE-2020-17048, Microsoft has had insight into...

phpLDAPadmin < 1.2.4 XSS Vulnerability - Windows

phpLDAPadmin is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

nginx Information Disclosure Vulnerability (CVE-2014-3556)

nginx is prone to an information disclosure vulnerability in the SMTP proxy. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...

MantisBT 1.2.13 XSS Vulnerability - Linux

MantisBT is prone to a cross-site scripting vulnerability. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; yo...

PT-2020-5017 · Adobe · Acrobat Reader

Name of the Vulnerable Software and Affected Versions: Adobe Acrobat Reader DC versions 2020.012.20048 and earlier Adobe Acrobat Reader DC versions 2020.001.30005 and earlier Adobe Acrobat Reader DC versions 2017.011.30175 and earlier Description: The issue is related to improper access control i...