PT-2024-11807

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the SUNRPC component in the Linux kernel, where the -sock can be set to NULL asynchronously unless the -recv mutex is held. This can trigger an oops when a sysfs...

PT-2022-11464

Name of the Vulnerable Software and Affected Versions calibre-web affected versions not specified Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This means that the software does not properly neutralize user...

HPESBGN04232 rev.1 - HPE Network Functions, Apache Log4j 2 Remote Arbitrary Code Execution

Potential Security Impact: Remote: Arbitrary Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Unified Data Management UDM 1.2009.0, 1.2101.0, 1.2103.0, 1.2105.0, 1.2107.0, 1.2109.0, 1.2109.1 HPE Authentication Server Function AUSF 1.2009.0, 1.2101.0, 1.2103.0,...

PT-2022-15172 · Unknown +1 · Connected Devices Platform Service +1

Name of the Vulnerable Software and Affected Versions: Connected Devices Platform Service affected versions not specified Description: The issue is an elevation-of-privilege vulnerability that allows attackers to affect the system. No information is provided about the estimated number of...

PT-2022-15202 · Microsoft · Remote Desktop Licensing Diagnoser +1

Name of the Vulnerable Software and Affected Versions: Remote Desktop Licensing Diagnoser affected versions not specified Description: A vulnerability allows attackers to obtain sensitive information and affect the system. The issue concerns the Remote Desktop Licensing Diagnoser Information...

PT-2021-23399 · Unknown · Livehelperchat

Name of the Vulnerable Software and Affected Versions: livehelperchat affected versions not specified Description: The issue concerns the generation of error messages that contain sensitive information. This could potentially expose internal details, making it easier for attackers to exploit othe...

PT-2021-23376 · Unknown · Livehelperchat

Name of the Vulnerable Software and Affected Versions: livehelperchat affected versions not specified Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This means that the software does not properly neutralize use...

PT-2021-13738 · Sma 410 +5 · Sma 410 +5

Name of the Vulnerable Software and Affected Versions: SMA 100 SMA 200 SMA 210 SMA 400 SMA 410 SMA 500v Description: An unauthenticated remote attacker can use SMA 100 as an unintended proxy or intermediary undetectable proxy to bypass firewall rules. Recommendations: For SMA 100, consider...

PT-2021-7720 · Zabbix +2 · Zabbix +2

Name of the Vulnerable Software and Affected Versions: Zabbix affected versions not specified Description: The issue is related to the lack of protection of the web page structure in Zabbix, allowing a remote attacker to impact data integrity. An authenticated user can create a hosts group from t...

PT-2021-17913 · Suse · Suse

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The issue is related to a security problem, but specific details are not provided. Recommendations: At the moment, there is no information about...

PT-2022-11908 · Odyssey +1 · Odyssey +1

Name of the Vulnerable Software and Affected Versions: Odyssey affected versions not specified Description: The issue allows a man-in-the-middle attacker to inject false responses to the client's initial queries when Odyssey storage is configured to use the PostgreSQL server with specific...

UVI-2021-1002212 comedi: dt9812: fix DMA buffers on stack

comedi: dt9812: fix DMA buffers on stack This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.2 by commit...

PT-2021-5265 · Microsoft · Windows Media Foundation +1

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Media Foundation affected versions not specified Description: The issue is related to incorrect code generation management in the Microsoft Windows Media Foundation component of the Windows operating system. It allows remote...

PT-2021-5295 · Microsoft · Visual Studio

Name of the Vulnerable Software and Affected Versions: Microsoft Visual Studio affected versions not specified Description: The issue is related to insufficient access restrictions in Microsoft Visual Studio, allowing an attacker to bypass security restrictions and elevate their privileges...

PT-2021-5084 · Microsoft · Azure Rtos

Name of the Vulnerable Software and Affected Versions: Azure RTOS affected versions not specified Description: The issue is related to insufficient boundaries in the controlled area of the system, which can allow an attacker to gain unauthorized access to the device. Recommendations: At the momen...

PT-2021-5070 · Microsoft · Office Excel +1

Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Description: The issue is related to incorrect code generation management in Microsoft Excel, allowing remote attackers to execute arbitrary code. This can be exploited by attackers to gain...

PYSEC-2021-814

TensorFlow is an open source platform for machine learning. In affected versions the implementation of ParallelConcat misses some input validation and can produce a division by 0. The fix will be included in TensorFlow 2.7.0. We will also cherrypick this commit on TensorFlow 2.6.1, TensorFlow...

PYSEC-2021-401

TensorFlow is an open source platform for machine learning. In affected versions the implementations for convolution operators trigger a division by 0 if passed empty filter tensor arguments. The fix will be included in TensorFlow 2.7.0. We will also cherrypick this commit on TensorFlow 2.6.1,...

CVE-2021-41212

TensorFlow is an open source platform for machine learning. In affected versions the shape inference code for tf.ragged.cross can trigger a read outside of bounds of heap allocated array. The fix will be included in TensorFlow 2.7.0. We will also cherrypick this commit on TensorFlow 2.6.1,...

CVE-2021-41200

TensorFlow is an open source platform for machine learning. In affected versions if tf.summary.createfilewriter is called with non-scalar arguments code crashes due to a CHECK-fail. The fix will be included in TensorFlow 2.7.0. We will also cherrypick this commit on TensorFlow 2.6.1, TensorFlow...