CVE-2021-37202

A vulnerability has been identified in NX 1980 Series All versions V1984, Solid Edge SE2021 All versions SE2021MP8. The IFC adapter in affected application contains a use-after-free vulnerability that could be triggered while parsing user-supplied IFC files. An attacker could leverage this...

Siemens NX 缓冲区错误漏洞

NX software is an integrated toolset that helps develop design, simulation and manufacturing solutions by supporting all aspects of product development. An out-of-bounds read vulnerability exists in Siemens IFC adapter in NX, which can be exploited by an attacker to cause a denial of service...

PC Wireless Wi-Fi Adapter Driver Security Updates August 2021

Wireless Wi-Fi vendors have informed HP of potential security vulnerabilities identified in some of their wireless PC adapters which may allow escalation of privilege and information disclosure. These industry-wide vulnerabilities are known as FragAttacks fragmentation and aggregation attacks...

Security update for qemu (moderate)

openSUSE Security Update: Security update for qemu Announcement ID: openSUSE-SU-2021:2858-1 Rating: moderate References: 1180432 1180433 1180434 1180435 1182651 1186012 1188299 1189145 Cross-References: CVE-2020-35503 CVE-2020-35504 CVE-2020-35505 CVE-2020-35506 CVE-2021-20255 CVE-2021-3527...

F5 BIG-IP输入验证错误漏洞

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, remote access policy management, etc. The F5 BIG IP AWS denial of service vulnerability occurs when the Data Plane Development Kit DPDK/Elastic Network Adapter ENA...

CVE-2021-3458

The Motorola MM1000 device configuration portal can be accessed without authentication, which could allow adapter settings to be modified...

Authentication flaw

The Motorola MM1000 device configuration portal can be accessed without authentication, which could allow adapter settings to be modified...

CVE-2021-3458

The Motorola MM1000 device configuration portal can be accessed without authentication, which could allow adapter settings to be modified...

CVE-2021-3458

CVE-2021-3458 affects the Motorola MM1000 device configuration portal. The connected sources indicate the portal can be accessed without authentication, allowing modification of adapter settings. The root cause is lack of authentication in the configuration portal, with potential impact on adapte...

CVE-2021-3458

The Motorola MM1000 device configuration portal can be accessed without authentication, which could allow adapter settings to be modified...

Motorola MM1000 授权问题漏洞

The Motorola MM1000 is a network adapter from Motorola, USA. A security vulnerability exists in the Motorola MM1000 that originates from an attacker being able to access the Motorola MM1000 device configuration portal and modify adapter settings without authentication...

Motorola MM1000 操作系统命令注入漏洞

The Motorola MM1000 is a network adapter from Motorola USA. A security vulnerability exists in the Motorola MM1000 that could allow privileged shell access and/or arbitrary privileged command execution on the adapter...

wildfly: resource adapter logs plaintext JMS password at warning level on connection error

A flaw was found in wildfly. JMS passwords are logged by the resource adaptor in plain text at the warning level when a connection error occurs allowing any user that has access to the log to gain access to this sensitive information. The highest threat from this vulnerability is to data...

Buffer overflow

Improper buffer restrictions in the firmware of IntelR Ethernet Adapters 800 Series Controllers and associated adapters before version 1.5.3.0 may allow a privileged user to potentially enable denial of service via local access...

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with Asset and Service Management (CVE-2021-29736)

Summary IBM WebSphere Application Server is shipped as a component of Maximo Asset Management, Maximo Industry Solutions including Maximo for Nuclear Power, Maximo for Transportation, Maximo for Life Sciences, Maximo for Oil and Gas, and Maximo for Utilities, Maximo Adapter for Primavera,...

Updated bluez packages fix security vulnerability

Updated bluez packages fix security vulnerability: Adapter incorrectly restores Discoverable state after powered down CVE-2021-3658...

CVE-2021-20595

Improper Restriction of XML External Entity Reference vulnerability in Mitsubishi Electric Air Conditioning System/Centralized Controllers G-50A Ver.3.35 and prior, GB-50A Ver.3.35 and prior, GB-24A Ver.9.11 and prior, AG-150A-A Ver.3.20 and prior, AG-150A-J Ver.3.20 and prior, GB-50ADA-A Ver.3.2...

PT-2021-20460 · Siemens · Teamcenter Visualization +2

Name of the Vulnerable Software and Affected Versions: JT2Go versions prior to V13.2 Solid Edge SE2021 versions prior to SE2021MP5 Teamcenter Visualization versions prior to V13.2 Description: A vulnerability has been identified in the specified software versions. The plmxmlAdapterSE70.dll librar...

PT-2024-11307 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a Use After Free UAF bug in the fza probe function. The fp variable, which is netdev private data, cannot be used after the free netdev call. Using fp after fre...

SQL Injection

Amendment This was deemed not a vulnerability. Overview Affected versions of this package are vulnerable to SQL Injection due to the sql.gsub function in lib/arjdbc/jdbc/adapter.rb not properly sanitizing user-supplied input beforeusing it in SQL queries. This may allow a remote attacker to injec...