PT-2020-20935

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 7.0.0 through 7.0.106 Apache Tomcat versions 8.5.0 through 8.5.59 Apache Tomcat versions 9.0.0.M1 through 9.0.39 Apache Tomcat versions 10.0.0-M1 through 10.0.0-M9 Description When serving resources from a network locati...

PT-2020-19348 · Avaya · Avaya Weblm

Name of the Vulnerable Software and Affected Versions: Avaya WebLM versions 7.0 through 7.1.3.6 Avaya WebLM versions 8.0 through 8.1.2 Description: An XML external entity XXE vulnerability in the Avaya WebLM admin interface allows authenticated users to read arbitrary files or conduct server-side...

PT-2020-15246 · Palo Alto Networks · Palo Alto Networks Panorama

Name of the Vulnerable Software and Affected Versions: Palo Alto Networks Panorama versions PAN-OS 8.1 through PAN-OS 8.1.16 Palo Alto Networks Panorama versions PAN-OS 9.0 through PAN-OS 9.0.10 Palo Alto Networks Panorama versions PAN-OS 9.1 through PAN-OS 9.1.4 Description: An information...

PT-2020-13920 · Atlassian · Gajira-Create Github Action

Name of the Vulnerable Software and Affected Versions: Atlassian gajira-create GitHub Action versions prior to 2.0.1 Description: The issue allows remote attackers to execute arbitrary code in the context of a GitHub runner by creating a specially crafted GitHub issue. This is due to a problem in...

Citrix Optimizer Tool

Citrix Optimizer Tool - v3.5.0.1 Created Date: Jun 21, 2017 Updated Date: Mar 12, 2025 SHA 256 Checksum: D8DCBF77BAE73E2EB4F8F6DCF408AFE90714230A15D3EB7390933D8DFB339044 To help us improve the Citrix Optimizer Tool, please send your feedback to https://forms.gle/TwWrKPT6J8u7GdKA6. Please note: Yo...

PT-2022-5555 · Mariadb +10 · Mariadb Server +10

Name of the Vulnerable Software and Affected Versions: MariaDB Server versions 10.9 and below Description: The issue is related to a use-after-free vulnerability via the Binary string::free buffer component at /sql/sql string.h. This vulnerability can be exploited by a remote attacker to cause a...

PT-2022-5560 · Mariadb +10 · Mariadb Server +10

Name of the Vulnerable Software and Affected Versions: MariaDB Server versions 10.6.3 and below Description: The issue is related to an use-after-free in the VDec::VDec component at /sql/sql type.cc, which can be exploited by a remote attacker to cause a denial of service. Recommendations: For...

PT-2022-5562 · Mariadb +10 · Mariadb Server +10

Name of the Vulnerable Software and Affected Versions: MariaDB Server versions 10.9 and below Description: The issue is related to a segmentation fault in the sql/item func.cc component. It is caused by insufficient use of the assert function. This allows a remote attacker to cause a denial of...

PT-2020-15547 · Jenkins · Jenkins Appspider Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins AppSpider Plugin versions 1.0.12 and earlier Description: The issue concerns the storage of a password in an unencrypted form in the global configuration file on the Jenkins controller. This password can be viewed by users with access...

PT-2020-15542 · Jenkins · Jenkins Sqlplus Script Runner Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins SQLPlus Script Runner Plugin versions 2.0.12 and earlier Description: The issue concerns the Jenkins SQLPlus Script Runner Plugin, where a password provided as a command line argument is not masked in build logs. This allows users wit...

WordPress Multiple Vulnerabilities (Oct 2020) - Windows

WordPress is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wordpress:wordpress"; ifdescripti...

PT-2020-4553 · Google · Google Chrome

Name of the Vulnerable Software and Affected Versions: Google Chrome for Android versions prior to 86.0.4240.185 Description: The issue is related to a heap buffer overflow in the UI component of Google Chrome on Android. This could allow a remote attacker who has compromised the renderer process...

PT-2020-4535 · Oracle +10 · Mysql Server +9

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 5.7.31 and prior MySQL Server versions 8.0.21 and prior Description: The issue is related to insufficient input validation in the InnoDB component of the MySQL Server product. It allows a high-privileged attacker with...

Advantech R-SeeNet

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Advantech Equipment: R-SeeNet Vulnerability: SQL Injection 2. RISK EVALUATION Successful exploitation of this vulnerability could allow remote attackers to retrieve sensitive information from the...

OPENSUSE-SU-2020:1542-1 Security update for chromium

This update for chromium fixes the following issues: Chromium was updated to 85.0.4183.121 boo1176791: - CVE-2020-15960: Out of bounds read in storage - CVE-2020-15961: Insufficient policy enforcement in extensions - CVE-2020-15962: Insufficient policy enforcement in serial - CVE-2020-15963:...

PT-2021-6569 · Gthumb +3 · Gthumb +3

Name of the Vulnerable Software and Affected Versions: gThumb versions prior to 3.10.1 Description: The issue is related to insufficient input validation in the gThumb image processing application. It allows a remote attacker to cause a denial of service via a malformed JPEG image. Recommendation...

PT-2020-14290 · Ory · Ory Fosite

Name of the Vulnerable Software and Affected Versions: ORY Fosite versions prior to 0.34.0 Description: The issue arises from improper error handling in the TokenRevocationHandler, which ignores errors coming from the storage. This can lead to unexpected 200 status codes indicating successful...

OPENSUSE-SU-2020:1510-1 Security update for chromium

This update for chromium fixes the following issues: Chromium was updated to version 85.0.4183.102 bsc1176306 fixing: - CVE-2020-6573: Use after free in video. - CVE-2020-6574: Insufficient policy enforcement in installer. - CVE-2020-6575: Race in Mojo. - CVE-2020-6576: Use after free in offscree...

PT-2020-16207

Name of the Vulnerable Software and Affected Versions Tiny Tiny RSS tt-rss versions prior to 2020-09-16 Description The issue is related to the failure of Tiny Tiny RSS to validate all URLs before requesting them. This could potentially lead to unauthorized access or other security issues...

OPENSUSE-SU-2020:1439-1 Security update for mumble

This update for mumble fixes the following issues: mumble was updated 1.3.2: client: Fixed overlay not starting Update to upstream version 1.3.1 - Security Fixed: Potential exploit in the OCB2 encryption 4227 boo1174041 - ICE Fixed: Added missing UserKDFIterations field to UserInfo = Prevents...