CVE-2021-27568

CVE-2021-27568 affects Netplex json-smart-v1 and json-smart-v2 (NumberFormatException uncaught), leading to potential denial of service or exposure of sensitive information when unhandled exceptions occur in the library. Connected IBM advisories confirm the vulnerability in IBM DOORS-related prod...

CVE-2021-27568

An issue was discovered in netplex json-smart-v1 through 2015-10-23 and json-smart-v2 through 2.4. An exception is thrown from a function, but it is not caught, as demonstrated by NumberFormatException. When it is not caught, it may cause programs using the library to crash or expose sensitive...

PT-2021-6276 · Netplex · Netplex Json-Smart-V1 +1

Name of the Vulnerable Software and Affected Versions: netplex json-smart-v1 versions through 2015-10-23 netplex json-smart-v2 versions through 2.4 Description: An issue was discovered where an exception is thrown from a function but not caught, as demonstrated by NumberFormatException. This may...

Directory Traversal

unrar is vulnerable to directory traversal. The vulnerability exists through RAR v2 archives as parsing of pathnames of the form ../filename are unpacked into the upper directory...

CVE-2021-20987

A denial of service and memory corruption vulnerability was found in Hilscher EtherNet/IP Core V2 prior to V2.13.0.21that may lead to code injection through network or make devices crash without recovery...

Memory corruption

A denial of service and memory corruption vulnerability was found in Hilscher EtherNet/IP Core V2 prior to V2.13.0.21that may lead to code injection through network or make devices crash without recovery...

CVE-2021-20987

Affects Hilscher EtherNet/IP Core V2 prior to 2.13.0.21. The vulnerability allows denial of service and memory corruption, which may lead to code injection via the network or cause device crashes. Exploitation context is network-based with no authentication. The provided documents do not specify ...

CVE-2020-24685

An unauthenticated specially crafted packet sent by an attacker over the network will cause a denial-of-service DoS vulnerability. Vulnerability allows attacker to stop the PLC. After stopping ERR LED flashing red, physical access to the PLC is required in order to restart the application. This...

Design/Logic Flaw

An unauthenticated specially crafted packet sent by an attacker over the network will cause a denial-of-service DoS vulnerability. Vulnerability allows attacker to stop the PLC. After stopping ERR LED flashing red, physical access to the PLC is required in order to restart the application. This...

CVE-2020-24685 AC500 V2 unauthenticated crafter packet vulnerability

An unauthenticated specially crafted packet sent by an attacker over the network will cause a denial-of-service DoS vulnerability. Vulnerability allows attacker to stop the PLC. After stopping ERR LED flashing red, physical access to the PLC is required in order to restart the application. This...

CVE-2020-24685

CVE-2020-24685 affects ABB AC500 V2 with onboard Ethernet versions 2.8.4 and earlier. An unauthenticated, specially crafted network packet can cause a denial-of-service by stopping the PLC; after stop, physical access is required to restart the application. Public documents describe the vulnerabi...

PT-2021-11065

Name of the Vulnerable Software and Affected Versions: ABB AC500 V2 products with onboard Ethernet versions prior to 2.8.4 Description: The issue is caused by an unauthenticated specially crafted packet sent over the network, resulting in a denial-of-service DoS condition. This allows an attacker...

CVE-2020-24685: Memory Allocation with Excessive Size Value

An unauthenticated specially crafted packet sent by an attacker over the network will cause a denial-of-service DoS vulnerability. Vulnerability allows attacker to stop the PLC. After stopping ERR LED flashing red, physical access to the PLC is required in order to restart the application. This...

CVE-2021-21304: Improperly Controlled Modification of Dynamically-Determined Object Attributes

Dynamoose is an open-source modeling tool for Amazon's DynamoDB. In Dynamoose from version 2.0.0 and before version 2.7.0 there was a prototype pollution vulnerability in the internal utility method "lib/utils/object/set.ts". This method is used throughout the codebase for various operations...

Denial Of Service (DoS)

github.com/istio/istio is vulnerable to denial of service DoS. The vulnerability exists through a NULL pointer dereference in pilot/pkg/proxy/envoy/v2/debug.go through the getResoourceVersion function...

PT-2021-9083

Name of the Vulnerable Software and Affected Versions Istio pilot versions prior to 1.5.0-alpha.0 Description A NULL pointer dereference was found in the getResourceVersion function in pkg/proxy/envoy/v2/debug.go. If a particular HTTP GET request is made to the pilot API endpoint, it is possible ...

CVE-2019-25014: NULL Pointer Dereference

A NULL pointer dereference was found in pkg/proxy/envoy/v2/debug.go getResourceVersion in Istio pilot before 1.5.0-alpha.0. If a particular HTTP GET request is made to the pilot API endpoint, it is possible to cause the Go runtime to panic resulting in a denial of service to the istio-pilot...

CVE-2021-3304: Buffer Copy without Checking Size of Input

Sagemcom F@ST 3686 v2 3.495 devices have a buffer overflow via a long sessionKey to the goform/login URI...

PT-2021-20025

Name of the Vulnerable Software and Affected Versions Sagemcom F@ST 3686 v2 version 3.495 Description The issue is a buffer overflow that can be triggered by sending a long sessionKey to the "goform/login" URI. This can potentially allow for unauthorized access or code execution. Recommendations...

Moderate: Red Hat Security Advisory: Red Hat Quay v3.3.3 bug fix and security update

Red Hat Quay v3.3.3 is now available with bug fixes and security updates. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...