PT-2021-3893 · Microsoft · Azure Sphere

Name of the Vulnerable Software and Affected Versions: Azure Sphere affected versions not specified Description: The issue is related to insufficient input validation in the Azure Sphere operating system. Exploitation of this issue may allow an attacker to cause a denial of service...

Saia_burgess_controls Pcd1.m0xx0 Unspecified Vulnerability

Saia Burgess PCD1.M0xx0, PCD1.M2xx0, PCD2.M5xx0, PCD3.Mxx60, PCD3.Mxxx0, PCD7.D4xxD, PCD7.D4xxV, PCD7.D4xxWTPF, and PCD7.D4xxxT5F devices before 1.24.50 and PCD3.T665 and PCD3.T666 devices before 1.24.41 have hardcoded credentials, which allows remote attackers to obtain administrative access via...

PT-2021-3916 · Microsoft · Azure Cyclecloud

Name of the Vulnerable Software and Affected Versions: Azure CycleCloud affected versions not specified Description: The issue is related to insufficient access control in Azure CycleCloud, a tool for organizing and managing high-performance computing HPC environments. Exploitation of this issue...

VulnCheck KEV: CVE-2021-36948

Microsoft Windows Update Medic Service contains an unspecified vulnerability that allows for privilege escalation...

Rockwellautomation Flex Unspecified Vulnerability

An exploitable denial of service vulnerability exists in the ENIP Request Path Logical Segment functionality of Allen-Bradley Flex IO 1794-AENT/B 4.003. A specially crafted network request can cause a loss of communications with the device resulting in denial-of-service. An attacker can send a...

PT-2021-3777 · Microsoft · Hyper-V +1

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in processing packets in the TCP/IP protocol implementation in the Hyper-V virtualization system in Windows. This can allow a remote attacker to execute...

Rockwellautomation Micrologix Unspecified Vulnerability

An exploitable denial-of-service vulnerability exists in the IPv4 functionality of Allen-Bradley MicroLogix 1100 Programmable Logic Controller Systems Series B FRN 16.000, Series B FRN 15.002, Series B FRN 15.000, Series B FRN 14.000, Series B FRN 13.000, Series B FRN 12.000, Series B FRN 11.000...

PT-2021-3903 · Microsoft · Windows Services For Nfs +1

Name of the Vulnerable Software and Affected Versions: Windows Services for NFS affected versions not specified Description: The issue is related to insufficient protection of service data, which can be exploited by a remote attacker to gain unauthorized access to protected information. This can...

Schneider-electric Modicon Unspecified Vulnerability

A CWE-334: Small Space of Random Values vulnerability exists in Modicon M221 all references, all versions that could allow the attacker to break the encryption keys when the attacker has captured the traffic between EcoStruxure Machine - Basic software and Modicon M221 controller. File data...

Mitsubishielectric Q03udecpu Unspecified Vulnerability

Multiple Mitsubishi Electric products are vulnerable to impersonations of a legitimate device by a malicious actor, which may allow an attacker to remotely execute arbitrary commands. File data ot500429.nasl...

PT-2021-3918 · Microsoft · Windows Print Spooler +1

Name of the Vulnerable Software and Affected Versions: Windows Print Spooler affected versions not specified Description: The issue is related to incorrect code generation management in the Windows Print Spooler. It allows a remote attacker to execute arbitrary code by sending a specially crafted...

Emerson Deltav Unspecified Vulnerability

An issue was discovered in Emerson DeltaV Easy Security Management DeltaV V12.3, DeltaV V12.3.1, and DeltaV V13.3. Critical vulnerabilities may allow a local attacker to elevate privileges within the DeltaV control system. File data ot500452.nasl...

Rockwellautomation Factorytalk Unspecified Vulnerability

In all versions of FactoryTalk View SEA remote, an authenticated attacker may be able to utilize certain handlers to interact with the data on the remote endpoint since those handlers do not enforce appropriate permissions. Rockwell Automation recommends enabling built in security features found...

SAP Mobile 信息泄露漏洞

SAP Mobile is a mobility application. It mainly runs on mobile devices mainly on iOS. An information disclosure vulnerability exists in SAP Mobile Platform 3.0 SP05, which arises from errors such as configuration during operation of a networked system or product. An unauthorized attacker could...

PT-2021-7882 · Microsoft · Sharepoint Server

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: The issue is related to errors in the representation of information by the user interface, allowing a remote attacker to perform a spoofing attack. This can affect the...

Updated fetchmail packages fix security vulnerability

Updated fetchmail packages fix security vulnerability: reportvbuild in report.c in Fetchmail before 6.4.20 sometimes omits initialization of the vsnprintf valist argument, which might allow mail servers to cause a denial of service or possibly have unspecified other impact via long error messages...

PT-2021-21367 · Showdoc · Showdoc

Name of the Vulnerable Software and Affected Versions: showdoc affected versions not specified Description: The issue concerns a missing cryptographic step in showdoc. Specifically, showdoc makes use of a hardcoded salt in its user password hash function. There is no information provided about th...

CVE-2021-36386

reportvbuild in report.c in Fetchmail before 6.4.20 sometimes omits initialization of the vsnprintf valist argument, which might allow mail servers to cause a denial of service or possibly have unspecified other impact via long error messages. NOTE: it is unclear whether use of Fetchmail on any...

PT-2021-4715 · Microsoft · Office Visio

Name of the Vulnerable Software and Affected Versions: Microsoft Office Visio affected versions not specified Description: The issue is caused by errors in array indexing when parsing EMF files, allowing an attacker to execute arbitrary code using a specially crafted file. Recommendations: At the...

CVE-2015-2100

Multiple stack-based buffer overflows in WebGate eDVR Manager and Control Center allow remote attackers to execute arbitrary code via unspecified vectors to the 1 TCPDiscover or 2 TCPDiscover2 function in the WESPDiscovery.WESPDiscoveryCtrl.1 control...