PT-2021-4693 · Microsoft · Exchange Server

Name of the Vulnerable Software and Affected Versions: Microsoft Exchange Server affected versions not specified Description: The issue is related to insufficient input validation in Microsoft Exchange Server, which can be exploited by a remote attacker to cause a denial of service...

PT-2021-4420 · Microsoft · Dynamics 365

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 on-premises affected versions not specified Description: The issue is related to errors in the representation of information by the user interface, which can be exploited by a remote attacker to conduct spoofing attacks...

PT-2021-4385 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in security settings, allowing a remote attacker to bypass the system's protection mechanism. This security-feature bypass vulnerability enables attackers to...

PT-2021-4427 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to an information disclosure vulnerability in the Windows Kernel. It allows attackers to obtain sensitive information and potentially affect the system. There is no...

PT-2021-4381 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to an information disclosure vulnerability in the Windows exFAT File System. It allows attackers to obtain sensitive information and potentially affect the system. Ther...

PT-2021-4430 · Microsoft · Windows Fast Fat File System Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Fast FAT File System Driver affected versions not specified Description: The issue is related to an information disclosure vulnerability in the Windows Fast FAT File System Driver. It allows attackers to obtain sensitive information,...

PT-2021-4432 · Microsoft · Sharepoint Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified SharePoint Foundation affected versions not specified SharePoint Enterprise Server affected versions not specified Description: The issue is related to incorrect code generation...

PT-2021-4376 · Microsoft · Sharepoint Server

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: The issue is related to errors in the user interface's representation of information. It may allow a remote attacker to conduct spoofing attacks, affecting the system...

PT-2021-4423 · Microsoft · Windows Desktop Bridge +1

Name of the Vulnerable Software and Affected Versions: Windows Desktop Bridge affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows Desktop Bridge application converter, allowing an attacker to potentially elevate their privileges. Th...

PT-2021-4383 · Microsoft · Windows Common Log File System Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Common Log File System Driver affected versions not specified Description: The issue is related to errors in privilege management, allowing an attacker to gain system privileges. This can affect the system, potentially leading to...

PT-2021-4878 · Microsoft · Intune Management Extension

Name of the Vulnerable Software and Affected Versions: Intune Management Extension affected versions not specified Description: The issue is related to errors in security settings, allowing a bypass of security restrictions. Exploitation of this issue may enable an attacker to circumvent security...

PT-2021-4429 · Microsoft · Office Excel +1

Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Description: The issue is related to errors in code generation management. It allows a remote attacker to execute arbitrary code. Recommendations: At the moment, there is no information about a...

PT-2021-23341 · Tad Web · Tad Web

Name of the Vulnerable Software and Affected Versions: Tad Web affected versions not specified Description: The issue allows remote attackers to bypass authorization, enabling them to exploit the system's original function for viewing bulletin boards and uploading files. Recommendations: At the...

PT-2021-6003 · Foxit · Foxit Phantompdf +1

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader affected versions not specified Foxit PhantomPDF affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the...

PT-2021-7504 · Cisco · Cisco Identity Services Engine

Name of the Vulnerable Software and Affected Versions: Cisco Identity Services Engine ISE affected versions not specified Description: A vulnerability in the web-based management interface could allow an authenticated, remote attacker to obtain sensitive information due to improper enforcement of...

PT-2021-5994 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to a buffer overflow in memory, allowing an attacker to gain unauthorized access to protected information. This can potentially impact the system's security...

Security Bulletin: Cross-Site Scripting Vulnerablity Affects the Dashboad UI of IBM Sterling B2B Integrator (CVE-2021-29836)

Summary IBM Sterling B2B Integrator has addressed the security vulnerability. Vulnerability Details CVEID: CVE-2021-29836 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web ...

PT-2021-22728 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE affected versions not specified Description: The issue allows anonymous users to retrieve information about any GitLab user, given a user ID, by utilizing certain endpoints. Recommendations: At the moment, there is no information...

PT-2021-19615 · Axis Communications +1 · Axis Os +3

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to user-controlled parameters for SMTP notifications not being correctly validated, leading to a potential buffer overflow. This ca...

PT-2021-15568 · Rexroth +1 · Indramotion Mlc Indramotion Xlc +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue concerns an exposed user and password database due to an unprotected web server resource. The passwords are hashed using a weak hashing algorithm, making them susceptible ...