33315 matches found
CVE-2021-43978: Insufficiently Protected Credentials
Allegro WIndows 3.3.4152.0, embeds software administrator database credentials into its binary files, which allows users to access and modify data using the same credentials...
Allegro Windows 安全漏洞
Allegro Windows is an accounting and management solution from the Belgian company Allegro. A security vulnerability exists in Allegro Windows that stems from Allegro WIndows embedding software administrator database credentials into a binary file, allowing users to access and modify data using th...
CODESYS V3 Web Server Heap-based Buffer Overflow (CVE-2021-33485)
Binary data scadacodesys2021-09.nbin...
GHSA-6R7C-6W96-8PVW Remote Code Execution in AjaxNetProfessional
Overview Affected versions of this package are vulnerable to Deserialization of Untrusted Data due to the possibility of deserialization of arbitrary .NET classes, which can be abused to gain remote code execution. Description Serialization is a process of converting an object into a sequence of...
CVE-2021-43037
An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. The Unitrends Windows agent was vulnerable to DLL injection and binary planting due to insecure default permissions. This allowed privilege escalation from an unprivileged user to SYSTEM...
CVE-2021-43037
An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. The Unitrends Windows agent was vulnerable to DLL injection and binary planting due to insecure default permissions. This allowed privilege escalation from an unprivileged user to SYSTEM...
CVE-2021-43037
An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. The Unitrends Windows agent was vulnerable to DLL injection and binary planting due to insecure default permissions. This allowed privilege escalation from an unprivileged user to SYSTEM...
Design/Logic Flaw
An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. The Unitrends Windows agent was vulnerable to DLL injection and binary planting due to insecure default permissions. This allowed privilege escalation from an unprivileged user to SYSTEM...
OSV-2021-1651 Heap-buffer-overflow in PCIDSK::CPCIDSKFile::ReadFromFile
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41993 Crash type: Heap-buffer-overflow WRITE Crash state: PCIDSK::CPCIDSKFile::ReadFromFile PCIDSK::CPCIDSKSegment::ReadFromFile PCIDSK::CPCIDSKBinarySegment::CPCIDSKBinarySegment...
PT-2021-23726 · Kaseya +1 · Kaseya Unitrends Backup Appliance +1
Name of the Vulnerable Software and Affected Versions: Kaseya Unitrends Backup Appliance versions prior to 10.5.5 Description: An issue was discovered in the Unitrends Windows agent, which was vulnerable to DLL injection and binary planting due to insecure default permissions. This allowed...
CVE-2021-43037: Uncontrolled Search Path Element
An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. The Unitrends Windows agent was vulnerable to DLL injection and binary planting due to insecure default permissions. This allowed privilege escalation from an unprivileged user to SYSTEM...
HP PageWide Printer Web Interface Detection
Binary data hppagewidewebdetect.nbin...
IDA2Obj - Static Binary Instrumentation
IDA2Obj is a tool to implement SBI StaticBinary Instrumentation. The working flow is simple: Dump object files COFF directly from one executable binary. Link the object files into a new binary, almost the same as the old one. During the dumping process, you can insert any data/code at any locatio...
IBM HTTP Server Installed (Windows)
Binary data ibmhttpdwininstalled.nbin...
openSUSE 15 Security Update : permissions (openSUSE-SU-2021:1520-1)
The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1520-1 advisory. - The permission package in SUSE Linux Enterprise Server allowed all local users to run dumpcap in the easy permission profile and sniff...
CVE-2021-23263
Unauthenticated remote attackers can read textual content via FreeMarker including files /scripts/, /templates/ and some of the files in /.git/ non-binary...
[SECURITY] Fedora 35 Update: golang-github-containerd-ttrpc-1.1.0-1.fc35
GRPC for low-memory environments. The existing grpc-go project requires a lot of memory overhead for importing packages and at runtime. While this is great for many services with low densi ty requirements, this can be a problem when running a large number of services o n a single machine or on a...
[SECURITY] Fedora 35 Update: libdxfrw-1.0.1-1.fc35
libdxfrw is a free C++ library to read and write DXF files in both formats, ASCII and binary form...
[SECURITY] Fedora 34 Update: golang-github-containerd-ttrpc-1.1.0-1.fc34
GRPC for low-memory environments. The existing grpc-go project requires a lot of memory overhead for importing packages and at runtime. While this is great for many services with low densi ty requirements, this can be a problem when running a large number of services o n a single machine or on a...