PT-2021-5441 · Apple · Ipados +4

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.4 tvOS versions prior to 14.6 watchOS versions prior to 7.5 iOS versions prior to 14.6 iPadOS versions prior to 14.6 Description: A logic issue was addressed with improved state management, which could allow a...

PT-2021-18048

Name of the Vulnerable Software and Affected Versions: Liferay Portal versions 7.2.1 through 7.3.5 Liferay DXP versions 7.1 before fix pack 21 Liferay DXP versions 7.2 before fix pack 10 Liferay DXP versions 7.3 before fix pack 1 Description: A cross-site scripting XSS issue exists in the Asset...

PT-2021-17429 · Siemens · Sinamics Sm150I +8

Name of the Vulnerable Software and Affected Versions: SIMATIC HMI Comfort Outdoor Panels V15 7" & 15" incl. SIPLUS variants versions prior to V15.1 Update 6 SIMATIC HMI Comfort Outdoor Panels V16 7" & 15" incl. SIPLUS variants versions prior to V16 Update 4 SIMATIC HMI Comfort Panels V15 4" - 22...

PT-2021-7491 · Mariadb +9 · Mariadb +10

Name of the Vulnerable Software and Affected Versions: MariaDB versions 10.5.9 and earlier Description: The issue is related to a use-after-free error in MariaDB, specifically when the BIGINT data type is used. This can be triggered by attackers, potentially leading to a denial of service. The...

PT-2021-18257 · Unknown · Red Discord Bot +1

Name of the Vulnerable Software and Affected Versions: WarnSystem versions prior to 1.3.18 Description: A vulnerability has been found in the WarnSystem cog for the Red discord bot, allowing any user to access sensitive information by setting up a specific template that is not properly sanitized...

PT-2021-4979

Name of the Vulnerable Software and Affected Versions GitLab versions 11.9 through 13.10.2 GitLab CE/EE versions prior to 14.0 Description The issue is related to insufficient input validation in GitLab when parsing image files, allowing remote command execution. This has been exploited in...

PT-2021-12943 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS on SRX Series versions 17.1R3 through 17.3R3-S10 Juniper Networks Junos OS on SRX Series versions 17.4 through 17.4R3-S4 Juniper Networks Junos OS on SRX Series versions 18.2 through 18.2R3-S6 Juniper Networks Junos ...

PT-2021-12969 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions 17.2R1 through 17.4R2-S11 Juniper Networks Junos OS versions 17.3 through 17.3R3-S8 Juniper Networks Junos OS versions 17.4R2-S12 through 17.4R3-S4 Juniper Networks Junos OS versions 18.1 through 18.1R3-S12...

PT-2021-18206 · Sydent · Sydent

Name of the Vulnerable Software and Affected Versions: Sydent versions prior to 89071a1, 0523511, f56eee3 Description: Sydent is a reference Matrix identity server that does not limit the size of requests it receives from HTTP clients, allowing a malicious user to send an HTTP request with a very...

PT-2021-17659

Name of the Vulnerable Software and Affected Versions: Apache Solr versions prior to 8.8.2 Description: The ReplicationHandler in Apache Solr, normally registered at "/replication" under a Solr core, has a masterUrl also leaderUrl alias parameter used to designate another ReplicationHandler on...

PT-2021-7834 · Redis +2 · Redis +2

Name of the Vulnerable Software and Affected Versions: Redis versions prior to 5.0.10 Redis versions prior to 6.0.9 Redis versions prior to 6.2.0 Description: A heap overflow issue was found in Redis when using a heap allocator other than jemalloc or glibc's malloc, leading to potential out of...

PT-2021-7092

Name of the Vulnerable Software and Affected Versions Atlassian Confluence Server and Data Center versions prior to 7.4.17 Atlassian Confluence Server and Data Center versions 7.13.0 through 7.13.6 Atlassian Confluence Server and Data Center versions 7.14.0 through 7.14.2 Atlassian Confluence...

PT-2021-7457

Name of the Vulnerable Software and Affected Versions underscore versions 1.3.2 through 1.12.1 underscore versions 1.13.0-0 through 1.13.0-2 Description The issue is related to the template function in the underscore library, which is used for working with arrays in JavaScript. It is caused by...

PT-2021-17045 · Synology · Synology Diskstation Manager

Name of the Vulnerable Software and Affected Versions: faad2 versions prior to 2.2.7.1 faad in Synology DiskStation Manager DSM versions prior to 6.2.3-25426-3 Description: The issue is related to a stack-based buffer overflow vulnerability and the use of unmaintained third-party components. This...

PT-2021-3622 · Percona +9 · Percona Server +10

Name of the Vulnerable Software and Affected Versions: MariaDB versions 10.2 through 10.2.37 MariaDB versions 10.3 through 10.3.28 MariaDB versions 10.4 through 10.4.18 MariaDB versions 10.5 through 10.5.9 Percona Server through 2021-03-03 wsrep patch through 2021-03-03 for MySQL Description: The...

PT-2021-14397 · Fleet · Fleet

Name of the Vulnerable Software and Affected Versions: Fleet versions prior to 3.7.0 Description: The issue allows a malicious actor with a valid node key to send a badly formatted request, causing the Fleet server to exit and resulting in denial of service. This is only possible while a live que...

September 8, 2020—KB4577015 (OS Build 14393.3930)

None None...

PT-2021-2443

Name of the Vulnerable Software and Affected Versions: Apache Tomcat versions 8.5.0 through 8.5.61 Apache Tomcat versions 9.0.0.M1 through 9.0.41 Apache Tomcat versions 10.0.0-M1 through 10.0.0 Description: The issue is related to the implementation of the HTTP/2 protocol in Apache Tomcat, which...

PT-2021-3513 · Autodesk · Autodesk Design Review

Name of the Vulnerable Software and Affected Versions: Autodesk Design Review versions 2011 through 2018 Description: A Type Confusion issue occurs when processing a maliciously crafted PDF file, allowing a malicious actor to execute arbitrary code. The vulnerability is related to errors in data...

PT-2021-7348

Name of the Vulnerable Software and Affected Versions BIND versions 9.11.0 through 9.11.36 BIND versions 9.12.0 through 9.16.26 BIND versions 9.17.0 through 9.18.0 BIND Supported Preview Editions versions 9.11.4-S1 through 9.11.36-S1 BIND Supported Preview Editions versions 9.16.8-S1 through...