PT-2021-16739 · Mentor Graphics · Nucleus Readystart +3

Name of the Vulnerable Software and Affected Versions: Capital Embedded AR Classic 431-422 versions all Capital Embedded AR Classic R20-11 versions prior to V2303 Nucleus NET versions all Nucleus ReadyStart V3 versions prior to V2017.02.4 Nucleus ReadyStart V4 versions prior to V4.1.0 Nucleus...

ASB-A-178725766

In rwmfchandlereadop of rwmfc.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution via a malicious NFC packet with no additional execution privileges needed. User interaction is not needed for exploitation...

GeoGebra Classic 5.0.631.0-d - Denial of Service Exploit

Exploit Title: GeoGebra Classic 5.0.631.0-d - Denial of Service PoC Exploit Author: Brian Rodriguez Vendor Homepage: https://www.geogebra.org Software Link: https://www.geogebra.org/download Version: 5.0.631.0-d Tested on: Windows 8.1 Pro STEPS Open the program GeoGebra Run the python exploit...

GeoGebra Classic 5.0.631.0-d - Denial of Service (PoC)

Exploit Title: GeoGebra Classic 5.0.631.0-d - Denial of Service PoC Date: 2021-03-15 Exploit Author: Brian Rodriguez Vendor Homepage: https://www.geogebra.org Software Link: https://www.geogebra.org/download Version: 5.0.631.0-d Tested on: Windows 8.1 Pro STEPS Open the program GeoGebra Run the...

Netscaler Notice of Status Change Announcement for Classic Policy Based Features and Functionalities

Citrix Systems, Inc. announces a Notice of Status Change NSC for Citrix ADC Classic policy-based features and functionalities. The dates and milestones provided are in accordance with stated End of Life/End of Support policies for Citrix Systems, Inc. Citrix ADC Features & Functionalities Affecte...

Getting " Your account cannot be added using this server address" error when VPN Session policy is configured with CLASSIC EXPRESSION and bound under AAA User/Group

User tries to connect to Citrix Gateway Vserver from Citrix Workspace will be getting " Your account cannot be added using this server address" when VPN Session policy for Citrix Receiver is configured with CLASSIC EXPRESSION and bound under AAA User/Group a shown below. No issue occurs through W...

Adobe Acrobat Classic 2020 Security Update (APSB21-09) - Mac OS X

Adobe Acrobat Classic 2020 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Adobe Reader Classic 2020 Security Update (APSB21-09) - Mac OS X

Adobe Reader Classic 2020 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Adobe Acrobat Classic 2020 Security Update (APSB21-09) - Windows

Adobe Acrobat Classic 2020 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

The vulnerability of the software platform for conducting marketing campaigns, both online and offline, in Adobe Campaign Classic, arises from insufficient verification of incoming requests. This allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the software platform used for conducting marketing campaigns, both online and offline, in Adobe Campaign Classic is related to insufficient verification of incoming requests. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected...

Nespresso Smart Cards Brewed with Weak Security

Researchers have demonstrated how to outsmart Nespresso Pro machines that use certain smart cards, hacking them to dispense coffee on-demand. Nespresso produces a range of coffees and machines for personal and professional use. Some of the commercial machines accept Mifare Classic stored-value...

The vulnerability of the Adobe Lightroom Classic graphic editor lies in its uncontrolled search path, which allows a hacker to execute arbitrary code.

The vulnerability of Adobe Lightroom Classic’s graphic editor is related to an uncontrolled element in the search process. Exploiting this vulnerability could allow a hacker to execute arbitrary code within the context of the current user...

PT-2021-16958

Name of the Vulnerable Software and Affected Versions Apache ActiveMQ Artemis versions prior to 2.16.0 Apache ActiveMQ versions prior to 5.16.1 Apache ActiveMQ versions prior to 5.15.14 Description The optional ActiveMQ LDAP login module can be configured to use anonymous access to the LDAP serve...

Rockwell Automation RSLinx Classic <= 2.57.00.14 DoS (CVE-2020-13573)

Binary data scadarslinxclassic2570014.nbin...

The vulnerability of the software platform for conducting marketing campaigns, both online and offline, in Adobe Campaign Classic, relates to reading data beyond the buffer in memory. This allows an attacker to gain unauthorized access to protected information.

The vulnerability of the software platform for conducting marketing campaigns, both online and offline, in Adobe Campaign Classic is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

CVE-2021-21009

Adobe Campaign Classic Gold Standard 10 and earlier, 20.3.1 and earlier, 20.2.3 and earlier, 20.1.3 and earlier, 19.2.3 and earlier and 19.1.7 and earlier are affected by a server-side request forgery SSRF vulnerability. Successful exploitation could allow an attacker to use the Campaign instance...

Server side request forgery (ssrf)

Adobe Campaign Classic Gold Standard 10 and earlier, 20.3.1 and earlier, 20.2.3 and earlier, 20.1.3 and earlier, 19.2.3 and earlier and 19.1.7 and earlier are affected by a server-side request forgery SSRF vulnerability. Successful exploitation could allow an attacker to use the Campaign instance...

CVE-2021-21009 Server-side request forgery (SSRF) in Campaign Classic could lead to sensitive information disclosure

Adobe Campaign Classic Gold Standard 10 and earlier, 20.3.1 and earlier, 20.2.3 and earlier, 20.1.3 and earlier, 19.2.3 and earlier and 19.1.7 and earlier are affected by a server-side request forgery SSRF vulnerability. Successful exploitation could allow an attacker to use the Campaign instance...

CVE-2021-21009

CVE-2021-21009 affects Adobe Campaign Classic (Gold Standard 10 and earlier; 19.x–20.x lines listed) and is described as a server-side request forgery (SSRF). The vulnerability could let an attacker use a Campaign instance to issue unauthorized requests to internal or external resources, potentia...

CVE-2021-21009 Server-side request forgery (SSRF) in Campaign Classic could lead to sensitive information disclosure

Adobe Campaign Classic Gold Standard 10 and earlier, 20.3.1 and earlier, 20.2.3 and earlier, 20.1.3 and earlier, 19.2.3 and earlier and 19.1.7 and earlier are affected by a server-side request forgery SSRF vulnerability. Successful exploitation could allow an attacker to use the Campaign instance...