CVE-2021-36315

CVE-2021-36315 affects Dell EMC PowerScale Nodes due to a hardware design flaw that can allow a local unauthenticated user to escalate privileges. The vulnerability also impacts Compliance mode clusters, where it is listed as critical. CVSSv3.1 vector: AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H with a b...

Design/Logic Flaw

Belledonne Belle-sip before 5.0.20 can crash applications such as Linphone via " \ " in the display name of a From header...

Design/Logic Flaw

Possible out of bound access due to improper validation of function table entries in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure...

CVE-2021-36315: Undefined Security Weakness

Dell EMC PowerScale Nodes contain a hardware design flaw. This may allow a local unauthenticated user to escalate privileges. This also affects Compliance mode and for Compliance mode clusters, is a critical vulnerability. Dell EMC recommends applying the workaround at your earliest opportunity...

EMC PowerScale security vulnerabilities

DELL EMC PowerScale is a horizontally scalable storage system for unstructured data from Dell USA. A security vulnerability exists in Dell EMC PowerScale that stems from a hardware design flaw in the Dell EMC PowerScale node. An attacker could exploit the vulnerability to cause a user to escalate...

Design/Logic Flaw

OctoRPKI crashes when encountering a repository that returns an invalid ROA just an encoded NUL \0 character...

Design/Logic Flaw

OctoRPKI does not limit the depth of a certificate chain, allowing for a CA to create children in an ad-hoc fashion, thereby making tree traversal never end...

Design/Logic Flaw

A User Mode Write AV in Editor+0x5d15 of WildBit Viewer v6.6 allows attackers to cause a denial of service DoS via a crafted tga file...

Design/Logic Flaw

A User Mode Write AV in Editor+0x76af of WildBit Viewer v6.6 allows attackers to cause a denial of service DoS via a crafted tiff file...

Design/Logic Flaw

A User Mode Write AV in Editor+0x576b of WildBit Viewer v6.6 allows attackers to cause a denial of service DoS via a crafted tiff file...

Design/Logic Flaw

A User Mode Write AV starting at Editor!TMethodImplementationIntercept+0x4189c6 of WildBit Viewer v6.6 allows attackers to cause a denial of service DoS via a crafted ico file...

Design/Logic Flaw

In Phoenix Contact FL MGUARD 1102 and 1105 in Versions 1.4.0, 1.4.1 and 1.5.0 the remote logging functionality is impaired by the lack of memory release for data structures from syslog-ng when remote logging is active...

Open Design Alliance Drawings SDK Resource Management Vulnerability

Open Design Alliance Drawings SDK is a software development kit for drawing design applications from Open Design Alliance, USA. The SDK provides access to data in .dwg and .dgn through a convenient, object-oriented API, offering features such as a C++ API, support for repairing files, and .NET,...

PT-2021-23793 · Open Design Alliance · Open Design Alliance Drawings Sdk

Name of the Vulnerable Software and Affected Versions: Open Design Alliance Drawings SDK versions prior to 2022.11 Description: An Out-of-bounds Read vulnerability exists in the DGN file reading procedure. Crafted data in a DGN file and lack of verification of input data can trigger a read past t...

PT-2021-23797

Name of the Vulnerable Software and Affected Versions Open Design Alliance PRC SDK versions prior to 2022.10 Description An out-of-bounds read issue exists in the U3D file reading procedure. Crafted data in a U3D file can trigger a read past the end of an allocated buffer. This can be leveraged b...

PT-2021-23798

Name of the Vulnerable Software and Affected Versions Open Design Alliance Drawings SDK versions prior to 2022.11 Description An Out-of-bounds Read issue exists in the OBJ file reading procedure due to the lack of input length validation, allowing a read past the end of an allocated buffer. This...

Zydis has an unspecified vulnerability

Zydis is an open source x86/x86-64 disassembly library from the Zyantific team.A security vulnerability exists in Zydis, which stems from an improper design or implementation during the development of code for a networked system or product. No detailed vulnerability details are currently availabl...

PT-2021-23795

Name of the Vulnerable Software and Affected Versions Open Design Alliance Drawings SDK versions prior to 2022.8 Description A Use After Free vulnerability exists in the DGN file reading procedure. The issue results from the lack of validating the existence of an object prior to performing...

PT-2021-23799

Name of the Vulnerable Software and Affected Versions Open Design Alliance PRC SDK versions prior to 2022.10 Description An out-of-bounds write issue exists in the U3D file reading procedure. Crafted data in a U3D file can trigger a write past the end of an allocated buffer. An attacker can...

ODAViewer buffer error vulnerability

Open Design Alliance OdaViewer is a viewer from Open Design Alliance, USA. It is used for visualization of all Oda supported file formats and other visualization related functions. A security vulnerability exists in ODAViewer, which stems from the fact that carefully crafted data in a U3D file ca...