PT-2021-25946

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.4.276 Description The issue concerns the virtio console, where the used length from the device is not properly limited. This is an automated ID intended to aid in the discovery of potential security...

PT-2021-29796

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.134 Description The issue concerns the virtio console, where the used length from the device is not properly limited. This is an automated ID intended to aid in discovery of potential security vulnerabilitie...

PT-2021-25801

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.134 Description The issue is related to the virtio console, where the used length from the device is not properly limited. This is an automated ID intended to aid in discovery of potential security...

PT-2021-29812

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.133 Description The issue is related to the smackfs, where the bytes count in the smk set cipso function is not properly restricted. The actual impact and attack plausibility have not yet been proven...

PT-2021-29941

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.4.276 Description The issue concerns the virtio console, where the used length from the device is not properly limited. This is an automated ID intended to aid in the discovery of potential security...

PT-2021-25860

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.198 Description The issue is related to the smackfs, where the bytes count in the smk set cipso function is not properly restricted. The actual impact and attack plausibility have not yet been proven...

PT-2021-29888

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.240 Description The issue is related to the smackfs, where the bytes count in the smk set cipso function is not properly restricted. The actual impact and attack plausibility have not yet been proven...

PT-2021-9160

Name of the Vulnerable Software and Affected Versions Replicated Classic versions 2.x Description The issue concerns an improperly secured API that exposes sensitive data from the Replicated Admin Console configuration. An attacker with network access to the Admin Console port 8800 on the...

CVE-2020-10590: Undefined Security Weakness

Replicated Classic 2.x versions have an improperly secured API that exposes sensitive data from the Replicated Admin Console configuration. An attacker with network access to the Admin Console port 8800 on the Replicated Classic server could retrieve the TLS Keypair Cert and Key used to configure...

CODESYS V2 Web Server Improperly Implemented Security Check (2021-07)

Binary data scadacodesys2021-07.nbin...

CVE-2021-32736: Improperly Controlled Modification of Object Prototype Attributes

think-helper defines a set of helper functions for ThinkJS. In versions of think-helper prior to 1.1.3, the software receives input from an upstream component that specifies attributes that are to be initialized or updated in an object, but it does not properly control modifications of attributes...

CVE-2021-20105

Machform prior to version 16 is vulnerable to an open redirect in Safariinit.php due to an improperly sanitized 'ref' parameter...

Open redirect

Machform prior to version 16 is vulnerable to an open redirect in Safariinit.php due to an improperly sanitized 'ref' parameter...

CVE-2021-20105

Machform prior to version 16 is vulnerable to an open redirect in Safariinit.php due to an improperly sanitized 'ref' parameter...

PT-2021-28984

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.234 Description The issue is related to the RDMA/rxe component, where if the creation of a QP Queue Pair fails, not all fields are properly cleared. This could potentially lead to security issues, although...

CVE-2021-30192

CODESYS V2 Web-Server before 1.1.9.20 has an Improperly Implemented Security Check...

CVE-2021-30192

CODESYS V2 Web-Server before 1.1.9.20 has an Improperly Implemented Security Check...

CVE-2021-30192

CODESYS V2 Web-Server before 1.1.9.20 has an Improperly Implemented Security Check...

CVE-2021-30192: Undefined Security Weakness

CODESYS V2 Web-Server before 1.1.9.20 has an Improperly Implemented Security Check...

Improperly Controlled Modification of Dynamically-Determined Object Attributes in querymen

querymen prior to 2.1.4 allows modification of object properties. The parameters of exported function handlertype, name, fn can be controlled by users without any sanitization. This could be abused for Prototype Pollution attacks...