CVE-2021-31487

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

CVE-2021-31487

OpenText Brava! Desktop 16.6.3.84 is affected by CVE-2021-31487 due to an out-of-bounds write in DWF file parsing. The flaw arises from insufficient validation of user-supplied data, allowing remote code execution when a user visits a malicious page or opens a malicious file, with the attacker ga...

CVE-2021-31486

OpenText Brava! Desktop 16.6.3.84 is affected by an out-of-bounds write in DWF file parsing that can lead to remote code execution. The flaw arises from insufficient validation of user-supplied data, enabling a write past the end of an allocated buffer. Exploitation requires user interaction (vis...

CVE-2021-31485

OpenText Brava! Desktop 16.6.3.84 is affected by a DWF file parsing heap-based buffer overflow. The root cause is insufficient validation of the length of user-supplied data before copying it into a fixed-length heap buffer, enabling remote code execution via user interaction (visiting a maliciou...

CVE-2021-31484

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

CVE-2021-31483

OpenText Brava! Desktop 16.6.3.84 is affected by a heap-based buffer overflow in the DWF file parsing routine due to insufficient validation of user-supplied data length before copying to a fixed-length buffer. This enables remote code execution with the current process context when a user visits...

CVE-2021-31481

OpenText Brava! Desktop 16.6.3.84 is affected by a vulnerability in parsing SLDPRT files that leads to an untrusted pointer dereference and remote code execution. The issue stems from insufficient validation of a user-supplied value before dereferencing it as a pointer. Exploitation requires user...

CVE-2021-31480

CVE-2021-31480 affects OpenText Brava! Desktop 16.6.3.84. The issue is a type confusion vulnerability in the parsing of DXF files caused by improper validation of user-supplied data. An attacker must entice a user to visit a malicious page or open a malicious file, after which arbitrary code can ...

CVE-2021-31479

OpenText Brava! Desktop 16.6.3.84 is affected by a PDF parsing vulnerability caused by an uninitialized pointer, enabling remote code execution. Exploitation requires user interaction (visiting a malicious page or opening a malicious file) and would run with the current process’s privileges. Repo...

CVE-2021-27399

A vulnerability has been identified in Simcenter Femap 2020.2 All versions V2020.2.MP3, Simcenter Femap 2021.1 All versions V2021.1.MP3. The femap.exe application lacks proper validation of user-supplied data when parsing FEMAP files. This could result in an out of bounds write past the end of an...

Default credentials

A vulnerability has been identified in Simcenter Femap 2020.2 All versions V2020.2.MP3, Simcenter Femap 2021.1 All versions V2021.1.MP3. The femap.exe application lacks proper validation of user-supplied data when parsing FEMAP files. This could result in an out of bounds write past the end of an...

CVE-2021-27399

Simcenter Femap vulnerability CVE-2021-27399 affects the femap.exe parsing of FEMAP files in 2020.2 (before 2020.2.MP3) and 2021.1 (before 2021.1.MP3), allowing an out-of-bounds write and potential code execution in the current process. Root cause: improper validation of user-supplied data during...

Microsoft SharePoint远程代码执行漏洞（CVE-2021-31181）

CVE-2021-31181: MICROSOFT SHAREPOINT WEBPART INTERPRETATION CONFLICT REMOTE CODE EXECUTION VULNERABILITY June 02, 2021 | The ZDI Research Team In May of 2021, Microsoft released a patch to correct CVE-2021-31181 – a remote code execution bug in the supported versions of Microsoft SharePoint Serve...

CVE-2021-31440

This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel 5.11.15. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of...

CVE-2021-31475

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Orion Job Scheduler 2020.2.1 HF 2. Authentication is required to exploit this vulnerability. The specific flaw exists within the JobRouterService WCF service. The issue is due to the WCF...

CVE-2021-31474

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Network Performance Monitor 2020.2.1. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SolarWinds.Serialization library. The issue results...

Deserialization of untrusted data

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Network Performance Monitor 2020.2.1. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SolarWinds.Serialization library. The issue results...

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.3.37598. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Orion Job Scheduler 2020.2.1 HF 2. Authentication is required to exploit this vulnerability. The specific flaw exists within the JobRouterService WCF service. The issue is due to the WCF...

Heap overflow

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Synology DiskStation Manager. Authentication is not required to exploit this vulnerablity. The specific flaw exists within the processing of DSI structures in Netatalk. The issue results fr...