Google Android out-of-bounds read vulnerability (CNVD-2021-101964)

Google Android is a Linux-based open source operating system from Google, Inc. An out-of-bounds read vulnerability exists in Google Android, which can be exploited by attackers to disclose local information that requires system execution privileges...

CentOS 8 : postgresql:12 (CESA-2021:5235)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:5235 advisory. - postgresql: server processes unencrypted bytes from man-in-the-middle CVE-2021-23214 - postgresql: memory disclosure in certain queries CVE-2021-3677...

Unisys Cargo Mobile Information Disclosure Vulnerability

Unisys Cargo Mobile is a shipping solution from Unisys, Inc. An information disclosure vulnerability exists in the Unisys Cargo Mobile Application prior to 1.2.29. The vulnerability stems from the use of plaintext storage of sensitive information, which could be exploited by an attacker to obtain...

Google Chrome Loader data validation error vulnerability

Google Chrome is a web browser from Google, Inc. A data validation error vulnerability exists in the loader component of Google Chrome prior to version 96.0.4664.93. It allows remote attackers to compromise cross-domain data via crafted HTML pages...

Bentley View Code Execution Vulnerability (CNVD-2021-102058)

Bentley View is a free viewer from Bentley Systems, Inc. A security vulnerability exists in Bentley View, which is caused by an out-of-bounds write when parsing DGN files. An attacker could exploit this vulnerability to execute arbitrary code on the system...

Google Android has an unspecified vulnerability (CNVD-2021-103500)

Google Android is a Linux-based open source operating system from Google, Inc. Google Android has a security vulnerability that could be exploited by attackers to cause a local denial of service without additional execution privileges...

Bentley View Code Execution Vulnerability (CNVD-2021-102048)

Bentley View is a free viewer from Bentley Systems, Inc. Bentley View has a security vulnerability that could be exploited by attackers to execute arbitrary code on the system...

Bentley View Code Execution Vulnerability (CNVD-2021-102054)

Bentley View is a free viewer from Bentley Systems, Inc. A security vulnerability exists in Bentley View, which is caused by out-of-bounds writes when parsing JT files. An attacker could exploit this vulnerability to execute arbitrary code on the system...

Bentley View JT File Parsing Out-of-Bounds Write Remote Code Execution Vulnerability (CNVD-2021-102039)

Bentley View is a free viewer from Bentley Systems, Inc. A security vulnerability exists in Bentley View JT file parsing, which can be exploited by attackers to execute code in the context of the current process...

Bentley View J2K File Parsing Heap Buffer Overflow Remote Code Execution Vulnerability

Bentley View, a free viewer from Bentley Systems, Inc. has a security vulnerability in Bentley View J2K file parsing. The upstairs is due to a failure to properly validate the length of user-supplied data before copying it to the heap buffer. An attacker could exploit this vulnerability to execut...

Bentley View Code Execution Vulnerability

Bentley View is a free viewer from Bentley Systems, Inc. A security vulnerability exists in Bentley View, which is caused by out-of-bounds writes when parsing JT files. An attacker could exploit this vulnerability to execute arbitrary code on the system...

Xylem AquaView

1. EXECUTIVE SUMMARY CVSS v3 9.3 ATTENTION: Low attack complexity Vendor: Xylem, Inc. Equipment: AquaView Vulnerability: Use of Hard-coded Credentials 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an authenticated local attacker to create users, delete users,...

Bentley View 3DS File Parsing After Release Using Remote Code Execution Vulnerability

Bentley View, a free viewer from Bentley Systems, Inc. A security vulnerability exists in Bentley View 3DS file parsing, which is caused by a use-after-release vulnerability when parsing 3DS files. An attacker could exploit this vulnerability to execute arbitrary code on the system...

Bentley View JT File Parsing Out-of-Bounds Write Remote Code Execution Vulnerability (CNVD-2021-102022)

Bentley View is a free viewer from Bentley Systems, Inc. A security vulnerability exists in Bentley View JT file parsing, which can be exploited by attackers to execute code in the context of the current process...

Bentley View 3DS File Parsing Out-of-Bounds Read Remote Code Execution Vulnerability

Bentley View is a free viewer from Bentley Systems, Inc. A security vulnerability exists in Bentley View 3DS file parsing, which can be exploited by attackers to execute code in the context of the current process...

Fortinet FortiProxy SSL VPN Cross-Site Request Forgery Vulnerability

Fortinet FortiProxy SSL VPN is an application from Fortinet, Inc. provides an intrusion detection feature.Fortinet FortiProxy SSL VPN suffers from a cross-site request forgery vulnerability that can be exploited by unauthenticated attackers to conduct cross-site request forgery CSRF attacks...

Bentley View 3DS File Parsing After Release Using Remote Code Execution Vulnerability

Bentley View, a free viewer from Bentley Systems, Inc. A security vulnerability exists in Bentley View 3DS file parsing, which is caused by not verifying the existence of an object before performing an operation on it. An attacker could exploit this vulnerability to execute code in the context of...

Google Chrome ANGLE security bypass vulnerability

Google Chrome is a web browser from Google, Inc. A security vulnerability exists in Google Chrome that stems from an object lifecycle issue in ANGLE. An attacker could use this vulnerability to bypass security restrictions...

CVE-2021-43051

The CVE-2021-43051 entry concerns TIBCO Spotfire Server API authorization. Affected are Spotfire Server releases

Bentley View JT file parsing after release using remote code execution vulnerability

Bentley View, a free viewer from Bentley Systems, Inc. A security vulnerability exists in Bentley View JT file parsing, which is caused by failing to verify the existence of an object before performing an operation on it. An attacker could exploit this vulnerability to execute code in the context...