PT-2021-4806 · Microsoft · Windows Hyper-V +1

Name of the Vulnerable Software and Affected Versions: Windows Hyper-V affected versions not specified Description: The issue exists due to insufficient input validation in the Windows Hyper-V Discrete Device Assignment DDA component. This can be exploited to cause a denial of service...

PT-2021-5125 · Microsoft · Azure Rtos

Name of the Vulnerable Software and Affected Versions: Azure RTOS affected versions not specified Description: The issue is related to insufficient protection of sensitive data in Azure RTOS, which can allow an attacker to gain unauthorized access to protected information. Recommendations: At the...

PT-2021-5162 · Microsoft · Visual Studio Code

Name of the Vulnerable Software and Affected Versions: Visual Studio Code affected versions not specified Description: The issue is related to insecure privilege management in Visual Studio Code. Exploitation of this issue may allow an attacker to elevate their privileges. Recommendations: At the...

PT-2021-4642 · Microsoft · Office Excel +1

Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Description: The issue is related to a security feature bypass in Microsoft Excel, which can be exploited to allow an attacker to execute arbitrary code. This can be achieved due to errors in...

PT-2021-22361 · Unknown +2 · Openvswitch +2

Name of the Vulnerable Software and Affected Versions: Open vSwitch OVS affected versions not specified Description: A memory leak was found in Open vSwitch OVS during userspace IP fragmentation processing. An attacker could use this flaw to potentially exhaust available memory by keeping sending...

PT-2021-7093 · Autodesk · Autodesk Design Review

Name of the Vulnerable Software and Affected Versions: Autodesk Design Review affected versions not specified Description: The issue is related to a buffer overflow vulnerability when processing DWF files, which could allow a remote attacker to execute arbitrary code in the context of the current...

PT-2021-13508 · Nvidia · Nvidia Vgpu

Name of the Vulnerable Software and Affected Versions: NVIDIA vGPU software affected versions not specified Description: The issue is related to the Virtual GPU Manager vGPU plugin in NVIDIA vGPU software, where the guest OS can potentially execute privileged operations. This may lead to...

PT-2021-20859 · Unknown · Kiwi Syslog Server

Name of the Vulnerable Software and Affected Versions: Kiwi Syslog Server affected versions not specified Description: A missing HTTP header X-Frame-Options has left customers vulnerable to clickjacking. Clickjacking is an attack where an attacker uses a transparent iframe to trick a user into...

PT-2021-21716 · Libmysofa +3 · Libmysofa +3

Name of the Vulnerable Software and Affected Versions: libmysofa affected versions not specified Description: The issue is related to a Heap-based Buffer Overflow. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where...

PT-2021-22128

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned. Description The issue arises from the affected controllers not properly sanitizing the input containing code syntax. This allows an attacker to craft code that can alter the intended controller...

PT-2021-8157

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a null pointer dereference in the snd usb set sample rate v2v3 function of the Linux kernel's usb-audio component. This could allow an attacker to cause a denial ...

PT-2021-4869 · Adobe · Audition

Name of the Vulnerable Software and Affected Versions: Adobe Audition versions 14.4 and earlier Description: The issue is related to a memory corruption vulnerability that could potentially result in arbitrary code execution in the context of the current user, requiring user interaction to be...

PT-2021-7390 · Vim +6 · Vim +6

Name of the Vulnerable Software and Affected Versions: vim affected versions not specified Description: The issue is related to a Use After Free vulnerability in the vim text editor, specifically in the regexp nfa.c component. This vulnerability allows a remote attacker to access confidential dat...

PT-2021-22137 · Auvesy · Versiondog

Name of the Vulnerable Software and Affected Versions: Product affected versions not specified Description: The issue concerns the product's failure to properly control resource allocation. This could allow a user to allocate unlimited memory buffers by utilizing API functions. Recommendations: A...

PT-2021-22132 · Auvesy · Versiondog

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue allows an attacker to initiate a session with the server without providing any form of authentication, as the server permits communication without any authentication...

PT-2021-22135 · Auvesy · Versiondog

Name of the Vulnerable Software and Affected Versions: No specific software or version is mentioned, so the information cannot be provided. Description: The issue concerns the use of a hard-coded blowfish key in encryption and decryption processes. This key can be easily extracted from binaries,...

Path traversal

python-tuf is a Python reference implementation of The Update Framework TUF. In both clients tuf/client and tuf/ngclient, there is a path traversal vulnerability that in the worst case can overwrite files ending in .json anywhere on the client system on a call to getonevalidtargetinfo. It occurs...

PT-2021-23610 · Unknown +4 · Clickhouse +3

Name of the Vulnerable Software and Affected Versions: ClickHouse affected versions not specified Description: A heap out-of-bounds read issue exists in ClickHouse's LZ4 compression codec when parsing a malicious query. The LZ4::decompressImpl loop reads a 16-bit unsigned user-supplied value offs...

PT-2021-7231 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw in the btrfs alloc tree b function in the Linux kernel's btrfs file system, specifically in fs/btrfs/extent-tree.c, is due to an improper lock operation. This issue can cause a...

PT-2021-6383 · Microsoft · Windows Installer +1

Name of the Vulnerable Software and Affected Versions: Windows Installer affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows Installer component of the Microsoft Windows operating system. Exploitation of this issue may allow an...