CVE-2021-31490

CVE-2021-31490 affects OpenText Brava! Desktop 16.6.3.84. The issue is an out-of-bounds write during parsing of DWF files, caused by insufficient validation of user-supplied data, allowing a remote attacker to execute code in the context of the current process after user interaction (e.g., visiti...

CVE-2021-31489

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

CVE-2021-31488

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

CVE-2021-31488

OpenText Brava! Desktop 16.6.3.84 is affected by a DWF file parsing vulnerability. The issue is an out-of-bounds write caused by improper validation of user-supplied data, allowing remote code execution when a user visits a malicious page or opens a malicious file. The vulnerability’s impact is e...

CVE-2021-31487

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

CVE-2021-31487

OpenText Brava! Desktop 16.6.3.84 is affected by CVE-2021-31487 due to an out-of-bounds write in DWF file parsing. The flaw arises from insufficient validation of user-supplied data, allowing remote code execution when a user visits a malicious page or opens a malicious file, with the attacker ga...

CVE-2021-31486

OpenText Brava! Desktop 16.6.3.84 is affected by an out-of-bounds write in DWF file parsing that can lead to remote code execution. The flaw arises from insufficient validation of user-supplied data, enabling a write past the end of an allocated buffer. Exploitation requires user interaction (vis...

CVE-2021-31485

OpenText Brava! Desktop 16.6.3.84 is affected by a DWF file parsing heap-based buffer overflow. The root cause is insufficient validation of the length of user-supplied data before copying it into a fixed-length heap buffer, enabling remote code execution via user interaction (visiting a maliciou...

CVE-2021-31484

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

CVE-2021-31483

OpenText Brava! Desktop 16.6.3.84 is affected by a heap-based buffer overflow in the DWF file parsing routine due to insufficient validation of user-supplied data length before copying to a fixed-length buffer. This enables remote code execution with the current process context when a user visits...

CVE-2021-31481

OpenText Brava! Desktop 16.6.3.84 is affected by a vulnerability in parsing SLDPRT files that leads to an untrusted pointer dereference and remote code execution. The issue stems from insufficient validation of a user-supplied value before dereferencing it as a pointer. Exploitation requires user...

CVE-2021-31480

CVE-2021-31480 affects OpenText Brava! Desktop 16.6.3.84. The issue is a type confusion vulnerability in the parsing of DXF files caused by improper validation of user-supplied data. An attacker must entice a user to visit a malicious page or open a malicious file, after which arbitrary code can ...

CVE-2021-31479

OpenText Brava! Desktop 16.6.3.84 is affected by a PDF parsing vulnerability caused by an uninitialized pointer, enabling remote code execution. Exploitation requires user interaction (visiting a malicious page or opening a malicious file) and would run with the current process’s privileges. Repo...

CVE-2021-34693

The canbus filesystem in the Linux kernel contains an information leak of kernel memory to devices on the CAN bus network link layer. An attacker with the ability to dump messages on the CAN bus is able to learn of uninitialized stack values by dumbing messages on the can bus. Mitigation Mitigati...

Unbreakable Enterprise kernel-container security update

4.14.35-2047.504.2.el7 - md/raid1: properly indicate failure when ending a failed write request Paul Clements Orabug: 32887159 - video: hypervfb: Add ratelimit on error message Michael Kelley Orabug: 32856879 - Drivers: hv: vmbus: Initialize unloadevent statically Andrea Parri Microsoft Orabug:...

CVE-2021-34693

net/can/bcm.c in the Linux kernel through 5.12.10 allows local users to obtain sensitive information from kernel stack memory because parts of a data structure are uninitialized...

PT-2021-4222 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel versions through 5.12.10 Description: The issue allows local users to obtain sensitive information from kernel stack memory because parts of a data structure are uninitialized. This is due to a lack of initialization of a certain...

SUSE: Security Advisory (SUSE-SU-2019:13976-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2020:3507-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-27399

A vulnerability has been identified in Simcenter Femap 2020.2 All versions V2020.2.MP3, Simcenter Femap 2021.1 All versions V2021.1.MP3. The femap.exe application lacks proper validation of user-supplied data when parsing FEMAP files. This could result in an out of bounds write past the end of an...