CVE-2021-31889

A vulnerability has been identified in Capital Embedded AR Classic 431-422 All versions, Capital Embedded AR Classic R20-11 All versions V2303, PLUSCONTROL 1st Gen All versions, SIMOTICS CONNECT 400 All versions V0.5.0.0. Malformed TCP packets with a corrupted SACK option leads to Information Lea...

CVE-2021-31345

A vulnerability has been identified in Capital Embedded AR Classic 431-422 All versions, Capital Embedded AR Classic R20-11 All versions V2303, PLUSCONTROL 1st Gen All versions. The total length of an UDP payload set in the IP header is unchecked. This may lead to various side effects, including...

CVE-2021-31882

A vulnerability has been identified in Capital Embedded AR Classic 431-422 All versions, Capital Embedded AR Classic R20-11 All versions V2303. The DHCP client application does not validate the length of the Domain Name Server IP options 0x06 when processing DHCP ACK packets. This may lead to...

CVE-2021-31346

A vulnerability has been identified in Capital Embedded AR Classic 431-422 All versions, Capital Embedded AR Classic R20-11 All versions V2303, PLUSCONTROL 1st Gen All versions, SIMOTICS CONNECT 400 All versions V0.5.0.0, SIMOTICS CONNECT 400 All versions V1.0.0.0. The total length of an ICMP...

PT-2021-7827 · Unknown · Capital Embedded Ar Classic R20-11 +1

Name of the Vulnerable Software and Affected Versions: Capital Embedded AR Classic 431-422 versions all Capital Embedded AR Classic R20-11 versions prior to V2303 Description: A Denial-of-Service condition can occur due to the DHCP client application not validating the length of the Vendor option...

PT-2021-6242 · Mentor Graphics +1 · Nucleus Net +11

Name of the Vulnerable Software and Affected Versions: Capital Embedded AR Classic 431-422 versions all Capital Embedded AR Classic R20-11 versions prior to V2303 PLUSCONTROL 1st Gen versions all SIMOTICS CONNECT 400 versions prior to V0.5.0.0 APOGEE MBC versions all APOGEE MEC versions all APOGE...

PT-2021-19251 · Siemens +1 · Simotics Connect 400 +12

Name of the Vulnerable Software and Affected Versions: Capital Embedded AR Classic 431-422 versions all Capital Embedded AR Classic R20-11 versions all prior to V2303 PLUSCONTROL 1st Gen versions all SIMOTICS CONNECT 400 versions all prior to V0.5.0.0 SIMOTICS CONNECT 400 versions all prior to...

PT-2021-19563 · Unknown · Capital Embedded Ar Classic R20-11 +1

Name of the Vulnerable Software and Affected Versions: Capital Embedded AR Classic 431-422 versions all Capital Embedded AR Classic R20-11 versions all prior to V2303 Description: A vulnerability has been identified where the DHCP client application does not validate the length of the Domain Name...

BrakTooth Bluetooth Bugs Bite: Exploit Code, PoC Released

The embargo period is over for a proof-of-concept PoC tool to test for the recently revealed BrakTooth flaws in Bluetooth devices, and the researchers who discovered them have released both the test kit and full exploit code for the bugs. BrakTooth is a collection of flaws affecting commercial...

CVE-2021-43058

An open redirect vulnerability exists in Replicated Classic versions prior to 2.53.1 that could lead to spoofing. To exploit this vulnerability, an attacker could send a link that has a specially crafted URL and convince the user to click the link, redirecting the user to an untrusted site...

CVE-2021-43058

An open redirect vulnerability exists in Replicated Classic versions prior to 2.53.1 that could lead to spoofing. To exploit this vulnerability, an attacker could send a link that has a specially crafted URL and convince the user to click the link, redirecting the user to an untrusted site...

CVE-2021-43058

An open redirect vulnerability exists in Replicated Classic versions prior to 2.53.1 that could lead to spoofing. To exploit this vulnerability, an attacker could send a link that has a specially crafted URL and convince the user to click the link, redirecting the user to an untrusted site...

Open redirect

An open redirect vulnerability exists in Replicated Classic versions prior to 2.53.1 that could lead to spoofing. To exploit this vulnerability, an attacker could send a link that has a specially crafted URL and convince the user to click the link, redirecting the user to an untrusted site...

CVE-2021-43058

CVE-2021-43058 is an open redirect in Replicated Classic before 2.53.1, where a crafted URL can spoof users by redirecting them to an untrusted site. Root cause: improper URL handling enabling redirects. Impact: spoofing via user interaction (clicking the malicious link) with partial confidential...

CVE-2021-43058

An open redirect vulnerability exists in Replicated Classic versions prior to 2.53.1 that could lead to spoofing. To exploit this vulnerability, an attacker could send a link that has a specially crafted URL and convince the user to click the link, redirecting the user to an untrusted site...

Replicated 输入验证错误漏洞

Replicated is a management software from Replicated, Inc. in the United States. It provides software vendors with a container-based platform for rapidly deploying cloud-native applications in customer environments to provide greater security and control. A security vulnerability exists in...

Adobe Lightroom Classic < 10.4 Privilege escalation (APSB21-97)

The version of Adobe Lightroom Classic installed on the remote Windows host is prior to 10.4. It is, therefore, affected by a vulnerability as referenced in the APSB21-97 advisory. - Adobe Lightroom Classic 10.3 and earlier are affected by a privilege escalation vulnerability in the Offline...

Adobe Lightroom Classic 安全漏洞

Adobe Lightroom Classic is a suite of graphics processing software from Adobe.Adobe Lightroom Classic 10.3 and earlier versions contain an elevation of privilege vulnerability that could be exploited by attackers to execute arbitrary code in the context of the current user...

PT-2021-4769 · Adobe · Lightroom Classic

Name of the Vulnerable Software and Affected Versions: Adobe Lightroom Classic versions 10.3 and earlier Description: The issue is related to a privilege escalation vulnerability in the Offline Lightroom Classic installer. An authenticated attacker could leverage this vulnerability to escalate...

APSB21-97: Security update available for Adobe Lightroom Classic

Adobe has released updates for Adobe Lightroom Classic for Windows and macOS. This update addresses a critical vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user...