PT-2021-5213 · Huawei · Huawei Smartphone

Name of the Vulnerable Software and Affected Versions: Huawei Smartphone affected versions not specified Description: The issue is related to insufficient input validation, which may allow a remote attacker to disclose protected information or cause a denial of service. Successful exploitation of...

PT-2021-23244 · Unknown · Ecoa Bas Controller

Name of the Vulnerable Software and Affected Versions: ECOA BAS controller affected versions not specified Description: The ECOA BAS controller is affected by an arbitrary file write and path traversal issue. Unauthenticated attackers can exploit this by using POST parameters to set arbitrary...

PT-2021-7323 · Linux +9 · Linux Kernel Overlayfs Subsystem +9

Name of the Vulnerable Software and Affected Versions: Linux kernel OverlayFS subsystem affected versions not specified Description: A race condition accessing file object in the Linux kernel OverlayFS subsystem was found in the way users do rename in specific ways with OverlayFS. This issue coul...

Security Bulletin: Vulnerability in bind (CVE-2021-25215)

Summary BIND is used by Power Hardware Management Console HMC. HMC has addressed the applicable CVE. Vulnerability Details CVEID: CVE-2021-25215 DESCRIPTION: ISC BIND is vulnerable to a denial of service, caused by an assertion failure while answering queries for DNAME records. By sending a query...

PT-2021-5225 · Esri · Arcgis Server

Name of the Vulnerable Software and Affected Versions: ArcGIS Server affected versions not specified Description: The issue is related to incorrect code generation management in the server, allowing a remote attacker to execute arbitrary HTML code. A remote file inclusion vulnerability in the...

PT-2021-4818 · Cisco · Cisco Ios Xe Sd-Wan

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE SD-WAN Software affected versions not specified Description: The issue is related to insufficient bounds checking when processing traffic, which could allow a remote attacker to cause a buffer overflow on an affected device. An...

PT-2021-5995 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a buffer overflow in the DirectComposition component of the Win32k Win32k.sys in Windows operating systems. This allows an attacker to obtain sensitive information...

PT-2021-4311 · Vmware · Vcenter Server Appliance +1

Name of the Vulnerable Software and Affected Versions: vCenter Server Appliance affected versions not specified Description: The vCenter Server contains multiple local privilege escalation issues due to improper permissions of files and directories. An authenticated local user with...

PT-2021-21940 · Taro · Taro

Name of the Vulnerable Software and Affected Versions: taro affected versions not specified Description: The issue is related to Inefficient Regular Expression Complexity. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents...

PT-2021-5366 · Unknown +2 · Kubernetes +1

Name of the Vulnerable Software and Affected Versions: Kubernetes affected versions not specified Description: A security issue was discovered in Kubernetes where a user may be able to create a container with subpath volume mounts to access files & directories outside of the volume, including on...

PT-2021-6959 · Microsoft · Windows Scripting Engine +1

Name of the Vulnerable Software and Affected Versions: Windows Scripting Engine affected versions not specified Description: The issue is related to a memory corruption vulnerability in the Windows Scripting Engine component, which is caused by a buffer overflow. This allows a remote attacker to...

PT-2021-6329 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient access control in the Win32k component of the Windows operating system. It allows an attacker to elevate their privileges. Recommendations: At the momen...

PT-2021-5229 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to errors in managing privileges in the Windows Common Log File System CLFS Driver. Exploitation of this issue may allow an attacker to elevate their...

PT-2021-6350 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to insufficient access control in the Win32k component of the Microsoft Windows operating system. It allows an attacker to elevate their privileges...

PT-2021-6977 · Microsoft · Windows Installer +1

Name of the Vulnerable Software and Affected Versions: Windows Installer affected versions not specified Description: The issue is related to insufficient input validation in the Windows Installer service, which can be exploited to cause a denial of service. This allows an attacker to affect the...

PT-2021-6284 · Microsoft · Windows Kernel +1

Name of the Vulnerable Software and Affected Versions: Windows Kernel affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in the Windows Kernel, associated with inadequate access control. Exploitation of this issue may allow an attacker to...

PT-2021-7049 · Microsoft · Office Access Connectivity Engine +1

Name of the Vulnerable Software and Affected Versions: Microsoft Office Access Connectivity Engine affected versions not specified Description: The issue is related to incorrect code generation management in the Microsoft Office Access Connectivity Engine component of the Microsoft Office package...

PT-2021-6320 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the implementation of the Windows SMB network protocol in the Microsoft Windows operating system, which is associated with information disclosure. Exploitation of th...

PT-2021-6315 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient access control in the Microsoft Windows operating system kernel, allowing an attacker to elevate their privileges. This can enable an attacker to impact...

PT-2021-6297 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to information disclosure in the Windows Redirected Drive Buffering SubSystem Driver. It allows attackers to obtain sensitive information and potentially affect the...