PT-2021-11124 · Siemens · Logo! Soft Comfort

Name of the Vulnerable Software and Affected Versions: LOGO! Soft Comfort versions prior to V8.4 Description: A security issue has been identified in the software, where it insecurely loads libraries, making it susceptible to DLL hijacking. This could allow a local attacker to successfully exploi...

File Containment Vulnerability in V8+ Terminal Security System

V8+ Terminal Security System is a new-generation enterprise terminal security software, which can dynamically detect, real-time process, and trace unknown threats in the user's network across the network to meet the increasingly complex needs of domestic enterprise users for security protection o...

foreman: world-readable OMAPI secret through the ISC DHCP server

A flaw was found in Red Hat Satellite, which allows a privileged attacker to read OMAPI secrets through the ISC DHCP of Smart-Proxy. This flaw allows an attacker to gain control of DHCP records from the network. The highest threat from this vulnerability is to system availability...

The vulnerability of DHCP option 119 on FreeBSD operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of DHCP option 119 in FreeBSD operating systems is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Cisco Advanced Malware Protection for Endpoints Windows Connector ClamAV for Windows and Immunet DLL Hijacking Vulnerability

...

Trend Micro Password Manager may insecurely load Dynamic Link Libraries

Overview Password Manager provided by Trend Micro Incorporated contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Trend Micro Incorporated reported this vulnerability to JPCERT/CC to notify users of its solution through JVN. Impact...

CVE-2021-27028

A Memory Corruption Vulnerability in Autodesk FBX Review version 1.5.0 and prior may lead to remote code execution through maliciously crafted DLL files...

CVE-2021-27027

An Out-Of-Bounds Read Vulnerability in Autodesk FBX Review version 1.5.0 and prior may lead to code execution through maliciously crafted DLL files or information disclosure...

Autodesk FBX Review 缓冲区错误漏洞

Autodesk FBX Review is a lightweight standalone tool for viewing 3D assets and animations. A memory corruption vulnerability exists in Autodesk FBX Review version 1.4.1.0. An attacker can exploit this vulnerability via specially crafted DLL files to achieve remote code execution...

SQL Injection Vulnerability in Dynamic Ring Monitoring Backend System of Guangzhou Kingston Electronic Technology Co.

Guangzhou Kingston Electronic Technology Co., Ltd. is a high-tech company integrating R&D, production and sales. Guangzhou Kingston Electronic Technology Co., Ltd. dynamic ring monitoring backend system SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive informati...

SUSE: Security Advisory (SUSE-SU-2017:3090-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Guangzhou Kingston Electronic Technology Co., Ltd. dynamic ring monitoring backstage system there are logic flaws vulnerability

Guangzhou Kingston Electronic Technology Co., Ltd, a research and development, production and sales as one of the high-tech companies, for the engine room, substation, base station, warehouse and other unmanned or less manned areas of the engine room monitoring system, engine room power environme...

SUSE: Security Advisory (SUSE-SU-2016:0473-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Autodesk FBX Review 缓冲区错误漏洞

Autodesk FBX Review is a lightweight standalone tool for viewing 3D assets and animations. An out-of-bounds read/write vulnerability exists in Autodesk FBX Review version 1.4.1.0. An attacker could exploit this vulnerability via specially crafted DLL files to achieve remote code execution or obta...

pocsuite3

This is a Python package called pocsuite3 that provides a framework for remote vulnerability testing and proof-of-concept development. It is designed to be used by penetration testers and security researchers. The package has a powerful proof-of-concept engine and comes with many features,...

CVE-2021-0240

On Juniper Networks Junos OS platforms configured as DHCPv6 local server or DHCPv6 Relay Agent, the Juniper Networks Dynamic Host Configuration Protocol Daemon JDHCPD process might crash if a malformed DHCPv6 packet is received, resulting in a restart of the daemon. The daemon automatically...

Siemens network software vulnerabilities, related to buffer overflows in dynamic memory, allow attackers to execute arbitrary code or cause system failures.

The vulnerability of Siemens network software is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause service interruptions...

CVE-2021-23277

Eaton Intelligent Power Manager IPM prior to 1.69 is vulnerable to unauthenticated eval injection vulnerability. The software does not neutralize code syntax from users before using in the dynamic evaluation call in loadUserFile function under scripts/libs/utils.js. Successful exploitation can...

Design/Logic Flaw

Eaton Intelligent Power Manager IPM prior to 1.69 is vulnerable to unauthenticated eval injection vulnerability. The software does not neutralize code syntax from users before using in the dynamic evaluation call in loadUserFile function under scripts/libs/utils.js. Successful exploitation can...

CVE-2021-23277 Improper Neutralization of Directives in Dynamically Evaluated Code

Eaton Intelligent Power Manager IPM prior to 1.69 is vulnerable to unauthenticated eval injection vulnerability. The software does not neutralize code syntax from users before using in the dynamic evaluation call in loadUserFile function under scripts/libs/utils.js. Successful exploitation can...