PT-2021-10671

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10.2641 Description: A heap-based buffer overflow issue exists in GNU LibreDWG. The issue is related to the htmlescape function in the escape.c file. Recommendations: For GNU LibreDWG version 0.10.2641, at the moment,...

PT-2021-10676

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10 Description: A heap-based buffer overflow issue exists in the software. The problem is located in the bit calc CRC function in the bits.c file. Recommendations: For GNU LibreDWG version 0.10, at the moment, there is ...

PT-2021-10684

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10 Description: An issue in GNU LibreDWG leads to a memory leak when crafted input is processed by the dwg decode eed function in the decode.c file. Recommendations: For GNU LibreDWG version 0.10, at the moment, there i...

PT-2021-3045 · Microsoft · Skype For Business +1

Name of the Vulnerable Software and Affected Versions: Skype for Business and Lync affected versions not specified Description: The issue is related to errors in the representation of information by the user interface of the corporate communication server. It may allow a remote attacker to perfor...

PT-2021-3056 · Microsoft · Visual Studio Code +1

Name of the Vulnerable Software and Affected Versions: Visual Studio Code Remote Containers Extension affected versions not specified Description: The issue is related to incorrect code generation management in the Visual Studio Code editor. Exploitation of this issue may allow a remote attacker ...

PT-2021-3053 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a lack of protection for service data in the Windows CSC service, which can be exploited to gain unauthorized access to protected information. This can allow attacke...

PT-2021-3054 · Microsoft · Sharepoint Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: The issue is related to errors in the user interface's information representation in Microsoft SharePoint Enterprise Server. It allows a remote attacker to perform a...

PT-2021-3151 · Microsoft · Windows Remote Desktop Protocol +1

Name of the Vulnerable Software and Affected Versions: Windows Remote Desktop Protocol RDP affected versions not specified Description: The issue is related to a buffer overflow in memory, which can be exploited by a remote attacker to gain unauthorized access to protected information. This can...

PT-2021-3014 · Microsoft · Exchange Server

Name of the Vulnerable Software and Affected Versions: Microsoft Exchange Server affected versions not specified Description: The issue is related to incorrect code generation management in Microsoft Exchange Server. It allows a remote attacker to execute arbitrary code. Recommendations: At the...

PT-2021-3050 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to a lack of protection for service data in the Microsoft Windows Infrared Data Association IrDA component, which can allow an attacker to disclose protected...

PT-2021-3011 · Microsoft · Windows Projected File System Fs Filter Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Projected File System FS Filter Driver affected versions not specified Description: The issue is related to a buffer overflow in memory, which can allow an attacker to gain unauthorized access to protected information. This can...

PT-2021-13518 · Cisco · Cisco Sd-Wan Vedge

Name of the Vulnerable Software and Affected Versions: Cisco SD-WAN vEdge Software affected versions not specified Description: The issue allows an attacker to execute arbitrary code as the root user or cause a denial of service DoS condition on an affected device. Recommendations: At the moment,...

PT-2021-13517 · Cisco · Cisco Sd-Wan Vedge

Name of the Vulnerable Software and Affected Versions: Cisco SD-WAN vEdge Software affected versions not specified Description: Multiple vulnerabilities in the software could allow an attacker to execute arbitrary code as the root user or cause a denial of service DoS condition on an affected...

PT-2021-2984 · Cisco · Cisco Sd-Wan Vmanage

Name of the Vulnerable Software and Affected Versions: Cisco SD-WAN vManage Software affected versions not specified Description: The issue is related to multiple vulnerabilities in the software, which could allow an unauthenticated, remote attacker to execute arbitrary code, gain access to...

PT-2021-2987 · Cisco · Cisco Sd-Wan Vmanage

Name of the Vulnerable Software and Affected Versions: Cisco SD-WAN vManage Software affected versions not specified Description: The issue is related to multiple vulnerabilities in the Cisco SD-WAN vManage Software, which could allow an unauthenticated, remote attacker to execute arbitrary code ...

PT-2021-3831 · Microsoft · Windows User Profile Service +1

Name of the Vulnerable Software and Affected Versions: Windows User Profile Service ProfSvc affected versions not specified Description: The issue is related to insufficient access restrictions in the implementation of the user account profile picture in the Windows User Profile Service. It allow...

PT-2021-19319 · Synology +4 · Synology Diskstation Manager +4

Name of the Vulnerable Software and Affected Versions: Synology DiskStation Manager affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations. Authentication is not required to exploit this issue. The flaw exists...

PT-2021-4212 · Texas Instruments · Ti-Rtos

Name of the Vulnerable Software and Affected Versions: TI-RTOS versions affected versions not specified Description: The issue is caused by an integer overflow in the ti sysbios rts MemAlloc alloc function, which can allow an attacker to execute arbitrary code or cause a denial of service. When...

PT-2021-4213 · Texas Instruments · Ti-Rtos

Name of the Vulnerable Software and Affected Versions: TI-RTOS affected versions not specified Description: The issue is related to an integer overflow vulnerability in the HeapTrack alloc function. This vulnerability can be triggered when extremely large values are passed, causing the function t...

PT-2021-8254 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a deadlock in the Linux kernel, specifically in the cdnsp thread irq handler function. The root cause is the use of spin lock and spin unlock instructions inste...