CVE-2021-32977

AVEVA System Platform versions 2017 through 2020 R2 P01 does not verify, or incorrectly verifies, the cryptographic signature for data...

Design/Logic Flaw

AVEVA System Platform versions 2017 through 2020 R2 P01 uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the software does not properly neutralize special elements within the pathname that ca...

CVE-2021-32981

CVE-2021-32981 affects AVEVA System Platform 2017–2020 R2 P01, where external input used to build a pathname can escape a restricted directory. Root cause: improper neutralization of path elements in the pathname, enabling path traversal (CWE-22). Impact is high for confidentiality, integrity, an...

CVE-2017-11400

creationtimestamp| type| source ---|---|--- 2022-04-04 02:27:11+00:00| seen| https://t.me/cibsecurity/40082...

CVE-2017-11401

creationtimestamp| type| source ---|---|--- 2022-04-04 02:27:07+00:00| seen| https://t.me/cibsecurity/40079...

Code injection

On Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 03.23, TCSEFEA23F3F20/21, and Belden Tofino Xenon Security Appliance, an arbitrary firmware image can be loaded because firmware signature verification for a USB stick can be bypassed. NOTE: this issue exists because of an...

Code injection

On Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 03.23, TCSEFEA23F3F20/21, and Belden Tofino Xenon Security Appliance, crafted ModBus packets can bypass the ModBus enforcer. NOTE: this issue exists because of an incomplete fix of CVE-2017-11401...

CVE-2022-28381

Mediaserver.exe in ALLMediaServer 1.6 has a stack-based buffer overflow that allows remote attackers to execute arbitrary code via a long string to TCP port 888, a related issue to CVE-2017-17932...

Stack overflow

Mediaserver.exe in ALLMediaServer 1.6 has a stack-based buffer overflow that allows remote attackers to execute arbitrary code via a long string to TCP port 888, a related issue to CVE-2017-17932...

CVE-2022-28381

CVE-2022-28381 describes a stack-based (SEH) buffer overflow in ALLMediaServer 1.6, triggered by a long string to TCP port 888, enabling remote code execution. Public sources (Metasploit module for ALLMediaServer 1.6) confirm exploitation against x86/WoW64 targets; no x64 support. The issue is ti...

Security Bulletin: Cloud Pak for Security contains packages that have multiple vulnerabilities

Summary Cloud Pak for Security v1.9.0.0 and earlier may be vulnerable to multiple CVEs through the use of dependency packages. These have been updated in the latest release and vulnerabilities have neen addressed. Please follow the instructions in the Remediation/Fixes section below to update to...

CVE-2017-20012

creationtimestamp| type| source ---|---|--- 2022-03-29 00:40:40+00:00| seen| https://t.me/cibsecurity/39687...

CVE-2017-20013

creationtimestamp| type| source ---|---|--- 2022-03-29 00:40:39+00:00| seen| https://t.me/cibsecurity/39686...

CVE-2017-20016

creationtimestamp| type| source ---|---|--- 2022-03-29 00:40:34+00:00| seen| https://t.me/cibsecurity/39683...

CVE-2017-20014

creationtimestamp| type| source ---|---|--- 2022-03-29 00:40:32+00:00| seen| https://t.me/cibsecurity/39681...

CVE-2017-20015

creationtimestamp| type| source ---|---|--- 2022-03-29 00:40:30+00:00| seen| https://t.me/cibsecurity/39680...

CVE-2017-20011

creationtimestamp| type| source ---|---|--- 2022-03-29 00:40:29+00:00| seen| https://t.me/cibsecurity/39679 2025-04-15 14:55:14+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11831...

Adobe Reader 2017 Security Update (APSB21-29) - Mac OS X

Adobe Reader 2017 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobatreader";...

Adobe Reader 2017 Security Update (APSB21-29) - Windows

Adobe Reader 2017 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobatreader";...

CVE-2017-20011

A vulnerability was found in WEKA INTEREST Security Scanner 1.8. It has been rated as problematic. This issue affects some unknown processing of the component HTTP Handler. The manipulation with an unknown input leads to denial of service. It is possible to launch the attack on the local host. Th...