PT-2021-6962 · Microsoft · Visual Studio Code

Name of the Vulnerable Software and Affected Versions: Visual Studio Code affected versions not specified Description: The issue is related to errors in the representation of information by the user interface, which can allow an attacker to conduct spoofing attacks. There is also a mention of a...

PT-2021-22458 · Pomerium +1 · Pomerium +1

Name of the Vulnerable Software and Affected Versions: envoyproxy envoy, pomerium affected versions not specified Description: The issue concerns a problem in envoyproxy envoy and pomerium. No specific details about the nature of the issue or its potential impact are provided. Recommendations: At...

PT-2021-7631 · Microsoft · Edge For Android

Name of the Vulnerable Software and Affected Versions: Microsoft Edge for Android affected versions not specified Description: The issue is related to insecure privilege management in Microsoft Edge for Android. Exploitation of this issue may allow a remote attacker to elevate their privileges...

Denial Of Service (DoS)

Exiv2 is vulnerable to denial of service. A null pointer dereference was found in Exiv2 versions v0.27.4 and earlier. The null pointer dereference is triggered when Exiv2 is used to print the metadata of a crafted image file. An attacker could potentially exploit the vulnerability to cause a deni...

PYSEC-2021-589

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause undefined behavior via binding a reference to null pointer in tf.rawops.SparseFillEmptyRows. The shape inference implementation does not validate that the input arguments are not empt...

CVE-2021-37640

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation of tf.rawops.SparseReshape can be made to trigger an integral division by 0 exception. The implementation calls the reshaping functor whenever there is at least an index in the input but...

PT-2021-7891 · Microsoft · Sharepoint Server

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: The issue is related to insufficient protection of service data in Microsoft SharePoint Server, which can be exploited by a remote attacker to gain unauthorized access t...

PT-2021-7926 · Exiv2 +9 · Exiv2 +9

Name of the Vulnerable Software and Affected Versions: Exiv2 versions v0.27.4 and earlier Description: An out-of-bounds read was found in Exiv2, a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. The out-of-bounds read is triggered wh...

CVE-2021-37843

The CVE-2021-37843 issue affects Atlassian SAML SSO apps and allows a remote attacker to login to a user account knowing only the username (no additional authentication). Fixed versions include Jira: 3.6.6.1, 4.0.12, 5.0.5; Confluence: 3.6.6, 4.0.12, 5.0.5; Bitbucket: 2.5.9, 3.6.6, 4.0.12, 5.0.5;...

PT-2021-9468 · Unknown · Magicmotion Flamingo 2

Name of the Vulnerable Software and Affected Versions: MagicMotion Flamingo 2 affected versions not specified Description: The issue concerns a lack of BLE encryption, which enables data sniffing and packet forgery. Recommendations: At the moment, there is no information about a newer version tha...

PT-2021-6967 · Microsoft · Defender

Name of the Vulnerable Software and Affected Versions: Microsoft Defender affected versions not specified Description: The issue is related to incorrect code generation management in Microsoft Defender, which is part of the Windows operating system. Exploitation of this issue may allow an attacke...

PT-2021-6966 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient access control in the Windows operating system kernel, allowing an attacker to potentially elevate their privileges. This could impact the system's...

PT-2021-5679 · Microsoft · Windows Remote Assistance +1

Name of the Vulnerable Software and Affected Versions: Windows Remote Assistance affected versions not specified Description: The issue is related to insufficient protection of service data in the Windows Remote Assistance tool. This can allow a remote attacker to gain unauthorized access to...

PT-2021-5682 · Microsoft · Sharepoint Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Foundation, SharePoint Server, and SharePoint Enterprise Server affected versions not specified Description: The issue is related to incorrect code generation management in Microsoft SharePoint products. It allows a remot...

PT-2021-22826 · Autodesk · Autodesk Design Review

Name of the Vulnerable Software and Affected Versions: Autodesk Design Review affected versions not specified Description: The issue arises when a maliciously crafted dwf or .pct file is consumed through the DesignReview.exe application, leading to a memory corruption vulnerability due to a read...

CVE-2021-26585

A potential vulnerability has been identified in HPE OneView Global Dashboard release 2.31 which could lead to a local disclosure of privileged information. HPE has provided an update to OneView Global Dashboard. The issue is resolved in 2.32...

PT-2024-11323 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a possible use-after-free in the wdt startup function. The problem occurs because the del timer function does not wait until the timer handler finishes, which c...

PT-2021-20482 · Accela · Accela Civic Platform

Name of the Vulnerable Software and Affected Versions: Accela Civic Platform versions prior to 20.2 Description: The issue allows for successURL XSS in the ssoAdapter/logoutAction.do endpoint. The vendor has stated that there are configurable security flags and they are unable to reproduce the...

PT-2021-3287 · Microsoft · Defender

Name of the Vulnerable Software and Affected Versions: Microsoft Defender affected versions not specified Description: The issue exists due to insufficient input validation in Microsoft Defender, which is part of the Windows operating system. Exploitation of this issue may allow an attacker to...

PT-2021-3302 · Microsoft · Windows Filter Manager +1

Name of the Vulnerable Software and Affected Versions: Windows Filter Manager affected versions not specified Description: The issue is related to insufficient access control in the Windows Filter Manager, allowing an attacker to elevate their privileges. This could potentially impact system...