PT-2021-4893 · Adobe +4 · Xmp Toolkit Sdk +4

Name of the Vulnerable Software and Affected Versions: XMP Toolkit SDK versions 2021.07 and earlier Description: The issue is related to a stack-based buffer overflow, which can potentially result in arbitrary code execution in the context of the current user. Exploitation of this issue requires...

PT-2021-20571 · 3S Smart Software Solutions · Codesys V2 Runtime Toolkit +1

Name of the Vulnerable Software and Affected Versions: CODESYS V2 Runtime Toolkit 32 Bit full versions prior to V2.4.7.56 PLCWinNT versions prior to V2.4.7.56 Description: A crafted request may cause a read access to an uninitialized pointer, resulting in a denial-of-service condition...

CODESYS 缓冲区错误漏洞

CODESYS is a controller development system from Germany's 3S-Smart Software Solutions A buffer error vulnerability exists in CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT versions prior to V2.4.7.56, which stems from a crafted request that could result in a denial-of-service condition due t...

PT-2021-4774 · Adobe +4 · Xmp Toolkit Sdk +4

Name of the Vulnerable Software and Affected Versions: XMP Toolkit SDK versions 2021.07 and earlier Description: The issue is related to a stack-based buffer overflow, which can potentially result in arbitrary code execution in the context of the current user. Exploitation of this issue requires...

PT-2021-4775 · Adobe +4 · Xmp Toolkit Sdk +4

Name of the Vulnerable Software and Affected Versions: XMP Toolkit SDK versions 2021.07 and earlier Description: The issue is related to a stack-based buffer overflow, which can potentially result in arbitrary code execution in the context of the current user. Exploitation of this issue requires...

APSB21-108: Security update available for Adobe XMP Toolkit SDK

Adobe has released updates for XMP-Toolkit-SDK. These updates resolve critical and important vulnerabilities. Successful exploitation could lead to arbitrary code execution and application denial of service...

PT-2021-4892 · Adobe +4 · Xmp Toolkit Sdk +4

Name of the Vulnerable Software and Affected Versions: XMP Toolkit SDK versions 2021.07 and earlier Description: The issue is related to a stack-based buffer overflow, which can potentially result in arbitrary code execution in the context of the current user. Exploitation of this issue requires...

PT-2021-6801 · Adobe +4 · Xmp Toolkit +4

Name of the Vulnerable Software and Affected Versions: XMP Toolkit versions 2021.07 and earlier Description: The issue is related to a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an...

CODESYS 安全漏洞

CODESYS is a controller development system from 3S-Smart Software Solutions, Germany. A security vulnerability exists in CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT versions prior to V2.4.7.56, which stems from a crafted invalid request without authentication in the affected software may...

PT-2021-20569 · 3S Smart Software Solutions · Codesys V2 Runtime Toolkit

Name of the Vulnerable Software and Affected Versions: CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT versions prior to V2.4.7.56 Description: The issue allows unauthenticated crafted invalid requests to result in several denial-of-service conditions. This can cause running PLC programs to b...

CODESYS 缓冲区错误漏洞

CODESYS is a controller development system from 3S-Smart Software Solutions, Germany. A security vulnerability exists in CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT versions prior to V2.4.7.56, which stems from a request with an invalid offset in the affected software that could result in...

PT-2021-20570 · 3S Smart Software Solutions · Codesys V2 Runtime Toolkit +1

Name of the Vulnerable Software and Affected Versions: CODESYS V2 Runtime Toolkit 32 Bit full versions prior to V2.4.7.56 PLCWinNT versions prior to V2.4.7.56 Description: A crafted request with invalid offsets may cause an out-of-bounds read or write access, resulting in a denial-of-service...

CVE-2021-34593

In CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versions V2.4.7.56 unauthenticated crafted invalid requests may result in several denial-of-service conditions. Running PLC programs may be stopped, memory may be leaked, or further communication clients may be blocked from accessing...

CVE-2021-34596

A crafted request may cause a read access to an uninitialized pointer in CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versions V2.4.7.56, resulting in a denial-of-service condition...

CVE-2021-34595

A crafted request with invalid offsets may cause an out-of-bounds read or write access in CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versions V2.4.7.56, resulting in a denial-of-service condition or local memory overwrite...

Nxp Semiconductors Nxp Mcu Xpresso Sdk 安全漏洞

The Nxp Semiconductors Nxp Mcu Xpresso Sdk is a comprehensive software support package from Nxp Semiconductors in the Netherlands. It is used to customize and download the Sdk for a specific processor or evaluation board selection, accelerating software development. A security vulnerability exist...

[SECURITY] Fedora 34 Update: python-reportlab-3.6.2-1.fc34

This is the ReportLab PDF Toolkit. It allows rapid creation of rich PDF documents, and also creation of charts in a variety of bitmap and vector formats...

CVE-2021-31350

An Improper Privilege Management vulnerability in the gRPC framework, used by the Juniper Extension Toolkit JET API on Juniper Networks Junos OS and Junos OS Evolved, allows a network-based, low-privileged authenticated attacker to perform operations as root, leading to complete compromise of the...

CVE-2021-31350

An Improper Privilege Management vulnerability in the gRPC framework, used by the Juniper Extension Toolkit JET API on Juniper Networks Junos OS and Junos OS Evolved, allows a network-based, low-privileged authenticated attacker to perform operations as root, leading to complete compromise of the...

CVE-2021-31350

CVE-2021-31350 affects Juniper Junos OS and Junos OS Evolved via the Juniper Extension Toolkit (JET) gRPC API. The issue stems from jsd authenticating a user and passing configuration operations to mgd (root-owned), enabling network-based, low-privilege attackers to perform root-level operations....