PT-2021-29885

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.240 Description A memory leak was discovered in the error handling path of the serial cs component in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations Fo...

PT-2021-29667

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.13.4 Description A memory leak was discovered in the error handling path of the serial cs component in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2021-29742

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.52 Description A memory leak was discovered in the error handling path of the serial cs component in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2021-25747

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.52 Description A memory leak was discovered in the error handling path of the serial cs component in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2021-25854

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.198 Description A memory leak was discovered in the error handling path of the serial cs component in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations Fo...

PT-2021-25672

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.13.4 Description: A memory leak was discovered in the error handling path of the serial cs component in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations: F...

PT-2021-25921

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.276 Description A memory leak was discovered in the error handling path of the serial cs component in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2021-29916

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.276 Description A memory leak was discovered in the error handling path of the serial cs component in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2021-25806

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.134 Description A memory leak was discovered in the error handling path of the serial cs component in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2021-25951

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.4.276 Description A memory leak was discovered in the error handling path of the serial cs component in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2021-25890

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.240 Description A memory leak was discovered in the error handling path of the serial cs component in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations Fo...

New PetitPotam NTLM Relay Attack Lets Hackers Take Over Windows Domains

A newly uncovered security flaw in the Windows operating system can be exploited to coerce remote Windows servers, including Domain Controllers, to authenticate with a malicious destination, thereby allowing an adversary to stage an NTLM relay attack and completely take over a Windows domain. The...

Mitigating NTLM Relay Attacks on Active Directory Certificate Services (AD CS)

Summary Microsoft is aware of PetitPotam which can potentially be used in an attack on Windows domain controllers or other Windows servers. PetitPotam is a classic NTLM Relay Attack, and such attacks have been previously documented by Microsoft along with numerous mitigation options to protect...

CVE-2021-2421: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft component: Integration and Interfaces. Supported versions that are affected are 9.0 and 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2021-2421

Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft component: Integration and Interfaces. Supported versions that are affected are 9.0 and 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

PT-2021-6440

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise CS SA Integration Pack versions 9.0 through 9.2 Description The issue is related to insufficient input validation in the Snapshot Integration component of the PeopleSoft Enterprise CS SA Integration Pack product. This...

PT-2021-17445

Name of the Vulnerable Software and Affected Versions Welch Allyn Service Tool versions prior to v1.10 Welch Allyn Connex Device Integration Suite – Network Connectivity Engine NCE versions prior to v5.3 Welch Allyn Software Development Kit SDK versions prior to v3.2 Welch Allyn Connex Central...

CVE-2021-2159

CVE-2021-2159 affects Oracle PeopleSoft Enterprise CS Campus Community Frameworks 9.2. The vulnerability allows a low-privileged, network-accessible attacker (via HTTP) to read a subset of data after a user is enticed to interact, per the CVSS vector CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N. ...

CVE-2021-2159: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft component: Frameworks. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise CS...

PT-2021-3027

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise CS Campus Community version 9.2 Description The issue is related to insufficient input validation in the Frameworks component of the Oracle PeopleSoft Enterprise CS Campus Community application. This can be exploited by a...