PT-2021-2713 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to incorrect code generation management in the Remote Procedure Call Runtime. It allows remote attackers to execute arbitrary code and affect the system...

PT-2021-2666 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to incorrect code generation management in the Remote Procedure Call Runtime. It allows remote attackers to execute arbitrary code and affect the system...

PT-2021-2738 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to incorrect code generation management in the GDI+ component of Windows operating systems. It allows remote attackers to execute arbitrary code, affecting the system...

CVE-2021-21389 BuddyPress privilege escalation via REST API

BuddyPress is an open source WordPress plugin to build a community site. In releases of BuddyPress from 5.0.0 before 7.2.1 it's possible for a non-privileged, regular user to obtain administrator rights by exploiting an issue in the REST API members endpoint. The vulnerability has been fixed in...

PT-2021-8011 · Nvidia · Tegra30

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a bug in the code that causes a voltage coupler lockup when the voltage-spread is out of range. This problem is observed on Tegra30 Ouya game console once...

PT-2021-17833 · Ca · Ca Ehealth Performance Manager

Name of the Vulnerable Software and Affected Versions: CA eHealth Performance Manager versions 6.3.2.12 and earlier Description: The issue is related to improper restriction of excessive authentication attempts. An attacker can perform an arbitrary number of authentication attempts using differen...

PT-2021-18081 · Esri · Esri Arcgis Server

Name of the Vulnerable Software and Affected Versions: Esri ArcGIS Server versions 10.8.1 and earlier Description: A use-after-free issue occurs when parsing a specially crafted file, allowing an authenticated attacker with specialized permissions to achieve arbitrary code execution in the contex...

PT-2021-14904 · Gitlab · Gitlab

Name of the Vulnerable Software and Affected Versions: GitLab versions 7.1 and later Description: An issue has been discovered in GitLab where a member of a private group was able to validate the use of a specific name for a private project. Recommendations: For GitLab versions 7.1 and later, at...

PT-2021-8276 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a memory leak in the imu fmt function of the intel-ipu3 component in the Linux kernel. This leak occurs due to the loss of reference to allocated memory. The...

PT-2021-2285 · Microsoft · Power Bi

Name of the Vulnerable Software and Affected Versions: Microsoft Power BI affected versions not specified Description: The issue is related to a lack of protection for service data in the Power BI report server, which could allow a remote attacker to gain unauthorized access to protected...

PT-2021-2280 · Microsoft · Office Visio

Name of the Vulnerable Software and Affected Versions: Microsoft Visio affected versions not specified Description: The issue is related to errors in security settings, allowing a remote attacker to bypass existing security restrictions. This can affect the system, but specific details about the...

PT-2021-2401 · Microsoft · Windows Media Photo Codec +1

Name of the Vulnerable Software and Affected Versions: Windows Media Photo Codec affected versions not specified Description: The issue is related to insufficient protection of service data in the Windows Media Photo Codec component, which can allow an attacker to gain unauthorized access to...

PT-2021-2399 · Microsoft · Windows Dns Server +1

Name of the Vulnerable Software and Affected Versions: Windows DNS Server affected versions not specified Description: The issue is related to incorrect code generation management in the Windows DNS server service, which can be exploited by a remote attacker to cause a denial of service. It also...

PT-2021-2298 · Microsoft · Hevc Video Extensions

Name of the Vulnerable Software and Affected Versions: HEVC Video Extensions affected versions not specified Description: The issue is related to incorrect code generation management in the HEVC Video Extension codec. Exploitation of this issue may allow an attacker to execute arbitrary code...

PT-2021-2286 · Microsoft · Windows Dns Server +1

Name of the Vulnerable Software and Affected Versions: Windows DNS Server affected versions not specified Description: The issue is related to incorrect code generation management in the Windows DNS Server service, allowing remote attackers to execute arbitrary code and affect the system...

PT-2021-2413 · Microsoft · Windows Print Spooler +1

Name of the Vulnerable Software and Affected Versions: Windows Print Spooler affected versions not specified Description: The issue is related to insecure privilege management in the Windows Print Spooler component of Windows operating systems. Exploitation of this issue may allow an attacker to...

PT-2021-17244 · Unknown · Hevc Video Extensions

Name of the Vulnerable Software and Affected Versions: HEVC Video Extensions affected versions not specified Description: The issue is related to a remote code execution problem. No further details are provided about the nature of the issue, affected devices, or real-world incidents...

PT-2021-2336 · Microsoft · Office

Name of the Vulnerable Software and Affected Versions: Microsoft Office affected versions not specified Description: The issue is related to incorrect code generation management in Microsoft Office, which can be exploited by a remote attacker to execute arbitrary code. This allows an attacker to...

PT-2021-2295 · Microsoft · 365 Apps For Enterprise +2

Name of the Vulnerable Software and Affected Versions: Microsoft Office affected versions not specified Description: The issue is related to incorrect code generation management in Microsoft Office, specifically affecting Microsoft Office, 365 Apps for Enterprise, and the Microsoft Excel...

PT-2021-2654 · D Link · D-Link Dsl-320B-D1

Name of the Vulnerable Software and Affected Versions: D-Link DSL-320B-D1 devices through EU 1.25 Description: The issue is related to a buffer overflow in the device's firmware, allowing a remote attacker to gain unauthorized access to the device with user login.xgi privileges. The vulnerability...