PT-2021-6968 · Microsoft · Windows Dns Server +1

Name of the Vulnerable Software and Affected Versions: Windows DNS Server affected versions not specified Description: The issue is related to errors in processing DNS requests, which can be exploited by a remote attacker to cause a denial of service using a specially crafted DNS request. This ca...

PT-2021-5648 · Microsoft · Windows Media Foundation +1

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Media Foundation affected versions not specified Description: The issue is related to incorrect code generation management in the Media Foundation component of Microsoft Windows. It allows remote attackers to execute arbitra...

PT-2021-6024 · Microsoft · Visual Studio

Name of the Vulnerable Software and Affected Versions: Microsoft Visual Studio affected versions not specified Description: The issue is related to errors in the representation of information by the user interface. It may allow a remote attacker to conduct spoofing attacks using a specially craft...

PT-2021-6050 · Microsoft · Windows Defender

Name of the Vulnerable Software and Affected Versions: Windows Defender affected versions not specified Description: The issue is related to incorrect code generation management in Windows Defender, part of the Windows operating system. It allows a remote attacker to execute arbitrary code using ...

PT-2021-3683 · Unknown +2 · Shibboleth +2

Name of the Vulnerable Software and Affected Versions: Moodle affected versions not specified Description: A remote code execution risk was identified in the Shibboleth authentication plugin of Moodle. The issue is related to incorrect code generation management. An attacker can exploit this issu...

The vulnerability of Huawei AnyOffice mobile office platform, related to the restoration of unreliable data in memory, allows a hacker to execute arbitrary code or gain full control over the application.

The vulnerability of Huawei AnyOffice mobile office platform relates to the recovery of unreliable data in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or gain full control over the application through a specially crafted request...

VMware ESXi 授权问题漏洞

Vmware VMware ESXi is a server virtualization platform from Vmware that can be installed directly on physical servers. An authorization issue vulnerability exists in VMware ESXi, which stems from a vulnerability in the product's SFCB authentication feature, which allows an attacker to bypass SFCB...

CVE-2021-22439

There is a deserialization vulnerability in Huawei AnyOffice V200R006C10. An attacker can construct a specific request to exploit this vulnerability. Successfully exploiting this vulnerability, the attacker can execute remote malicious code injection and to control the device...

CVE-2021-31412

Improper sanitization of path in default RouteNotFoundError view in com.vaadin:flow-server versions 1.0.0 through 1.0.14 Vaadin 10.0.0 through 10.0.18, 1.1.0 prior to 2.0.0 Vaadin 11 prior to 14, 2.0.0 through 2.6.1 Vaadin 14.0.0 through 14.6.1, and 3.0.0 through 6.0.9 Vaadin 15.0.0 through 19.0....

The vulnerability of the VP9 video compression extension lies in improper code generation, which allows an attacker to execute arbitrary code.

The vulnerability of the VP9 video compression extension lies in improper code generation. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially crafted request...

GHSA-M5VX-8CHX-QVMM Form validation can be skipped

Impact By crafting a special GET request containing a valid form state, a form can be submitted without invoking any validators. We consider the severity low because it is not possible to change any form values since the form state is secured with an HMAC that is still verified. That means that...

Autodesk Design Review 缓冲区错误漏洞

Autodesk Design Review ADR is a suite of AutoCAD drawing software assist software from Autodesk, Inc. The software supports viewing, marking, measuring, printing, and tracking changes to 2D and 3D design files.Autodesk Design Review is vulnerable to a buffer overflow vulnerability, which could be...

Autodesk Design Review 资源管理错误漏洞

Autodesk Design Review ADR is a suite of AutoCAD drafting software support software from Autodesk, Inc. The software supports viewing, marking, measuring, printing, and tracking changes to 2D and 3D design files.Autodesk Design Review is vulnerable to a resource management error that could be...

Autodesk Design Review 缓冲区错误漏洞

Autodesk Design Review ADR is a suite of AutoCAD drafting software assist software from Autodesk, Inc. The software supports viewing, marking, measuring, printing, and tracking changes to 2D and 3D design files.Autodesk Design Review is vulnerable to a buffer error vulnerability that could be...

Apache OFBiz Insecure Deserialization (CVE-2021-29200)

An insecure deserialization vulnerability exists in Apache OFBiz. This vulnerability is due to Java serialization issues when processing requests. A remote unauthenticated attacker can exploit this vulnerability by sending a crafted request...

Sensio Labs Symfony 授权问题漏洞

Symfony is a PHP framework based on the MVC architecture and is free software, distributed under the MIT License. Symfony suffers from an elevation of privilege vulnerability that can be exploited by an attacker to gain access to all firewalls by sending a specially crafted request...

PT-2021-4975 · 3D Viewer · 3D Viewer

Name of the Vulnerable Software and Affected Versions: 3D Viewer versions affected versions not specified Description: The issue is related to errors in code generation management. Exploitation of this issue may allow a remote attacker to execute arbitrary code by sending a specially crafted...

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server packages relates to information disclosure capabilities, which allow attackers to perform spear-phishing attacks.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server stems from insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to carry out spear-phishing attacks using a specially crafted...

Wibu-Systems CodeMeter 缓冲区错误漏洞

The Wibu-Systems CodeMeter is a basic technology for all protection and licensing solutions offered by Wibu-Systems. A security vulnerability exists in Wibu-Systems CodeMeter CmWAN, which can be exploited by a remote attacker to submit a special request that can crash the application...

The vulnerability of the SetWizardConfig function in D-Link DIR-846 router microprogramming software allows a hacker to execute arbitrary commands.

The vulnerability of the SetWizardConfig function in D-Link DIR-846 router microprogramming software is related to insufficient checking of arguments passed in commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands using a specially created request /HNAP1/...