PT-2021-19315

Name of the Vulnerable Software and Affected Versions Foxit Studio Photo version 3.6.6.931 Description This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The...

poppler:qt_textbox_fuzzer: Heap-buffer-overflow in ps_unicode_value

Project: https://anongit.freedesktop.org/git/poppler/poppler.git https://gitlab.freedesktop.org/poppler/poppler.git https://gitlab.freedesktop.org/ceyhunalp/poppler.git Detailed Report: https://oss-fuzz.com/testcase?key=4808122662256640 Project: poppler Fuzzing Engine: libFuzzer Fuzz Target:...

CVE-2021-0234

Due to an improper Initialization vulnerability on Juniper Networks Junos OS QFX5100-96S devices with QFX 5e Series image installed, ddos-protection configuration changes will not take effect beyond the default DDoS Distributed Denial of Service settings when configured from the CLI. The DDoS...

Input validation

Due to an improper Initialization vulnerability on Juniper Networks Junos OS QFX5100-96S devices with QFX 5e Series image installed, ddos-protection configuration changes will not take effect beyond the default DDoS Distributed Denial of Service settings when configured from the CLI. The DDoS...

CVE-2021-0234 Junos OS: QFX5100-96S: DDoS protection does not work as expected.

Due to an improper Initialization vulnerability on Juniper Networks Junos OS QFX5100-96S devices with QFX 5e Series image installed, ddos-protection configuration changes will not take effect beyond the default DDoS Distributed Denial of Service settings when configured from the CLI. The DDoS...

CVE-2021-0234

CVE-2021-0234 affects Juniper Networks Junos OS on QFX5100-96S with QFX 5e Series image. The issue is an improper initialization that prevents ddos-protection changes from taking effect beyond default DDoS settings configured via CLI. The ddos-protection (jddosd) daemon keeps the device functioni...

CVE-2021-0234: Improper Initialization

Due to an improper Initialization vulnerability on Juniper Networks Junos OS QFX5100-96S devices with QFX 5e Series image installed, ddos-protection configuration changes will not take effect beyond the default DDoS Distributed Denial of Service settings when configured from the CLI. The DDoS...

KLA12156 Multiple vulnerabilities in Apple iTunes

Multiple vulnerabilities were found in Apple iTunes. Malicious users can exploit these vulnerabilities to perform cross-site scripting attack, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A cross-site-scripting XSS vulnerability in WebKit can be exploited to perfo...

PT-2021-12947

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS on QFX5100-96S versions 17.3 prior to 17.3R3-S10 Juniper Networks Junos OS on QFX5100-96S versions 17.4 prior to 17.4R3-S4 Juniper Networks Junos OS on QFX5100-96S versions 18.1 prior to 18.1R3-S10 Juniper Networks...

Corel Parallels Desktop buffer error vulnerability

Parallels Desktop is a virtual machine software that runs on Mac computers. A security vulnerability exists in the Toolgate component in Parallels Desktop version 15.1.4-47270. The vulnerability stems from failure to properly initialize memory before accessing it. A local attacker could exploit t...

CVE-2021-28167: Missing Initialization of Resource

In Eclipse Openj9 to version 0.25.0, usage of the jdk.internal.reflect.ConstantPool API causes the JVM in some cases to pre-resolve certain constant pool entries. This allows a user to call static methods or access static members without running the class initialization method, and may allow a us...

PT-2021-19297

Name of the Vulnerable Software and Affected Versions Parallels Desktop version 15.1.4-47270 Description This issue allows local attackers to disclose sensitive information on affected installations. An attacker must first obtain the ability to execute low-privileged code on the target guest syst...

Corel Parallels Desktop buffer error vulnerability

Parallels Desktop is a virtual machine software that runs on Mac computers. A security vulnerability exists in the Toolgate component in Parallels Desktop version 15.1.5-47309. The vulnerability stems from failure to properly initialize memory before accessing it. A local attacker could exploit t...

Eclipse OpenJ9 security vulnerabilities

Eclipse OpenJ9 is a Java application engine from the Eclipse Foundation. The product is primarily used to run Java applications. A security vulnerability exists in Eclipse Openj9 version 0.25, which stems from the fact that the jdk.internal.reflect.ConstantPool API causes the JVM to pre-parse...

Parallels Desktop Toolgate Uninitialized Memory Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within t...

Parallels Desktop Toolgate Uninitialized Memory Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within t...

PT-2021-19296

Name of the Vulnerable Software and Affected Versions Parallels Desktop version 15.1.4-47270 Description This issue allows local attackers to disclose sensitive information on affected installations. An attacker must first obtain the ability to execute low-privileged code on the target guest syst...

Fields stuck after initialization

Handle adelamo Vulnerability details Impact If I am right, the impact could be middle or high. Proof of Concept Here you have a gist: Tools Used Vscode Recommended Mitigation Steps In order to fix the issue, we need to fetch the data from the loan wherever we need it in DebtLocker --- The text wa...

Citrix WEM Agent Host Service Initialization failed - event id 0

Wem Agent fails to start - in the event log we see the error: Event id 0 - Agent host Service Initialization Failed...

SUSE: Security Advisory (SUSE-SU-2019:0060-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...