CVE-2021-31427

CVE-2021-31427 affects Parallels Desktop 15.1.5-47309. The vulnerability lies in the Open Tools Gate component, due to lack of proper locking when performing operations on an object, enabling local disclosure of sensitive information. An attacker must run low-privileged code on the guest and coul...

CVE-2021-31425

CVE-2021-31425 affects Parallels Desktop 16.1.2-49151, with the flaw in the Parallels Tools component caused by improper validation of user-supplied data leading to an integer overflow during buffer allocation. This local privilege escalation could allow an attacker to execute arbitrary code in t...

CVE-2021-31424

CVE-2021-31424 concerns Parallels Desktop 15.1.5-47309. The flaw is in the Open Tools Gate component, caused by improper validation of the length of user-supplied data before copying into a fixed-length heap buffer. This enables local privilege escalation to execute arbitrary code in the hypervis...

CVE-2021-31423

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.5-47309. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw...

CVE-2021-31421

This vulnerability allows local attackers to delete arbitrary files on affected installations of Parallels Desktop 16.1.1-49141. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists...

CVE-2021-31422

CVE-2021-31422 affects Parallels Desktop 16.1.1-49141. The vulnerability is in the e1000e virtual device, caused by a lack of proper locking when performing operations on an object, enabling a local attacker who already has high-privilege code execution in the guest to escalate privileges and exe...

CVE-2021-31421

The CVE-2021-31421 issue affects Parallels Desktop 16.1.1-49141, specifically the Toolgate component. The root cause is improper validation of a user-supplied path before file operations, leading to a directory traversal that can delete arbitrary files inside the hypervisor context. This is a loc...

CVE-2021-31420

CVE-2021-31420 is a stack-based buffer overflow in Parallels Desktop 16.1.0-48950, within the Toolgate component. The issue results from insufficient validation of the length of user-supplied data before copying to a fixed-length stack buffer. This permits local attackers who can run low-privileg...

CVE-2021-31418

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.4-47270. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw...

CVE-2021-31419

Parallels Desktop 15.1.4-47270 is affected by a vulnerability in the Toolgate component where memory is not properly initialized before access. This enables local, low-privilege attackers with control on the target guest to disclose sensitive information; the issue can be leveraged with other vul...

CVE-2021-31418

Parallels Desktop 15.1.4-47270 is affected by a Toolgate memory initialization flaw that allows local attackers to disclose sensitive information from the guest environment. The issue arises from uninitialized memory access; a low-privilege, local code execution on the target guest, combined with...

CVE-2021-31419

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.4-47270. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw...

CVE-2021-25678

A vulnerability has been identified in Solid Edge SE2020 All versions SE2020MP13, Solid Edge SE2020 All versions SE2020MP14, Solid Edge SE2021 All Versions SE2021MP4. Affected applications lack proper validation of user-supplied data when parsing PAR files. This could result in an out of bounds...

CVE-2020-26997

A vulnerability has been identified in Solid Edge SE2020 All versions SE2020MP13, Solid Edge SE2020 All versions SE2020MP14, Solid Edge SE2021 All Versions SE2021MP4. Affected applications lack proper validation of user-supplied data when parsing PAR files. This could lead to pointer dereferences...

Stack overflow

A vulnerability has been identified in Solid Edge SE2020 All versions SE2020MP13, Solid Edge SE2020 All versions SE2020MP14, Solid Edge SE2021 All Versions SE2021MP4. Affected applications lack proper validation of user-supplied data when parsing of PAR files. This could result in a stack based...

Default credentials

A vulnerability has been identified in Tecnomatix RobotExpert All versions V16.1. Affected applications lack proper validation of user-supplied data when parsing CELL files. This could result in an out of bounds write past the end of an allocated structure. An attacker could leverage this...

Default credentials

A vulnerability has been identified in Solid Edge SE2020 All versions SE2020MP13, Solid Edge SE2020 All versions SE2020MP14, Solid Edge SE2021 All Versions SE2021MP4. Affected applications lack proper validation of user-supplied data when parsing PAR files. This could result in an out of bounds...

CVE-2021-27382

CVE-2021-27382 affects Siemens Solid Edge (SE2020 before MP13, SE2020 before MP14, SE2021 before MP4). The issue is a stack-based buffer overflow in PAR file parsing due to inadequate validation of user-supplied data, enabling code execution in the context of the current process. Public advisorie...

CVE-2021-25678

A vulnerability has been identified in Solid Edge SE2020 All versions SE2020MP13, Solid Edge SE2020 All versions SE2020MP14, Solid Edge SE2021 All Versions SE2021MP4. Affected applications lack proper validation of user-supplied data when parsing PAR files. This could result in an out of bounds...

CVE-2020-26997

CVE-2020-26997 affects Siemens Solid Edge (SE2020/SE2021) where PAR file parsing lacks input validation, allowing pointer dereference and potential code execution. Affected products: Solid Edge SE2020 (< SE2020MP13/MP14) and SE2021 (