CVE-2021-44680

Veritas Enterprise Vault up to version 14.1.2 is affected by a deserialization flaw in EVMonitoring.exe that enables remote code execution. The issue arises from the lack of proper validation of untrusted data in the .NET Remoting-based TCP services (and local IPC services) started on startup, wh...

CVE-2021-44680

An issue 4 of 6 was discovered in Veritas Enterprise Vault through 14.1.2. On start-up, the Enterprise Vault application starts several services that listen on random .NET Remoting TCP ports for possible commands from client applications. These TCP services can be exploited due to deserialization...

CVE-2021-44681

Veritas Enterprise Vault vulnerable through 14.1.2: startup launches multiple services listening on random .NET Remoting TCP ports and local IPC. Deserialization in the .NET Remoting services enables potential remote code execution or arbitrary commands on the server. Affected component: EVStgOff...

CVE-2021-44682

An issue 6 of 6 was discovered in Veritas Enterprise Vault through 14.1.2. On start-up, the Enterprise Vault application starts several services that listen on random .NET Remoting TCP ports for possible commands from client applications. These TCP services can be exploited due to deserialization...

CVE-2021-44682: Deserialization of Untrusted Data

An issue 6 of 6 was discovered in Veritas Enterprise Vault through 14.1.2. On start-up, the Enterprise Vault application starts several services that listen on random .NET Remoting TCP ports for possible commands from client applications. These TCP services can be exploited due to deserialization...

CVE-2021-44681: Deserialization of Untrusted Data

An issue 5 of 6 was discovered in Veritas Enterprise Vault through 14.1.2. On start-up, the Enterprise Vault application starts several services that listen on random .NET Remoting TCP ports for possible commands from client applications. These TCP services can be exploited due to deserialization...

PT-2021-24149

Name of the Vulnerable Software and Affected Versions: Veritas Enterprise Vault versions through 14.1.2 Description: The issue is related to the deserialization behavior inherent to the .NET Remoting service. On start-up, the Enterprise Vault application starts several services that listen on...

CVE-2021-44678: Deserialization of Untrusted Data

An issue 2 of 6 was discovered in Veritas Enterprise Vault through 14.1.2. On start-up, the Enterprise Vault application starts several services that listen on random .NET Remoting TCP ports for possible commands from client applications. These TCP services can be exploited due to deserialization...

Veritas Enterprise Vault 代码问题漏洞

Veritas Enterprise Vault is an enterprise-grade file protection, archiving automation software from Veritas, USA. A security vulnerability exists in Veritas Enterprise Vault 14.1.2 and prior versions where the Enterprise Vault application starts multiple services that listen for commands from the...

PT-2021-24148

Name of the Vulnerable Software and Affected Versions: Veritas Enterprise Vault versions through 14.1.2 Description: An issue was discovered in Veritas Enterprise Vault where the application starts several services that listen on random .NET Remoting TCP ports for possible commands from client...

PT-2021-24151

Name of the Vulnerable Software and Affected Versions: Veritas Enterprise Vault versions through 14.1.2 Description: An issue was discovered in Veritas Enterprise Vault where the application starts several services that listen on random .NET Remoting TCP ports for possible commands from client...

CVE-2021-44677: Deserialization of Untrusted Data

An issue 1 of 6 was discovered in Veritas Enterprise Vault through 14.1.2. On start-up, the Enterprise Vault application starts several services that listen on random .NET Remoting TCP ports for possible commands from client applications. These TCP services can be exploited due to deserialization...

CVE-2021-44680: Deserialization of Untrusted Data

An issue 4 of 6 was discovered in Veritas Enterprise Vault through 14.1.2. On start-up, the Enterprise Vault application starts several services that listen on random .NET Remoting TCP ports for possible commands from client applications. These TCP services can be exploited due to deserialization...

CVE-2021-44679: Deserialization of Untrusted Data

An issue 3 of 6 was discovered in Veritas Enterprise Vault through 14.1.2. On start-up, the Enterprise Vault application starts several services that listen on random .NET Remoting TCP ports for possible commands from client applications. These TCP services can be exploited due to deserialization...

PT-2021-24146

Name of the Vulnerable Software and Affected Versions: Veritas Enterprise Vault versions through 14.1.2 Description: The issue arises from the deserialization behavior inherent to the .NET Remoting service, which is used by several services started by the Enterprise Vault application on start-up...

Veritas Enterprise Vault 代码问题漏洞

Veritas Enterprise Vault is an enterprise-grade file protection, archiving automation software from Veritas, USA. A security vulnerability exists in Veritas Enterprise Vault 14.1.2 and prior versions where the Enterprise Vault application starts multiple services that listen for commands from the...

PT-2021-24150

Name of the Vulnerable Software and Affected Versions: Veritas Enterprise Vault versions through 14.1.2 Description: The issue is related to the deserialization behavior inherent to the .NET Remoting service. On start-up, the Enterprise Vault application starts several services that listen on...

Mitsubishi Electric MELSEC iQ-R series 输入验证错误漏洞

The Mitsubishi Electric MELSEC iQ-R series is a programmable logic controller from Mitsubishi Electric Japan. An input validation error vulnerability exists in the Mitsubishi Electric MELSEC iQ-R series, which arises from a lack of proper control over the allocation and maintenance of finite...

arrow:arrow-ipc-stream-fuzz: Heap-buffer-overflow in arrow::internal::ValidateArrayImpl::Visit

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=4961281405222912 Project: arrow Fuzzing Engine: libFuzzer Fuzz Target: arrow-ipc-stream-fuzz Job Type: libfuzzerasanarrow Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

EulerOS Virtualization 2.9.1 : kernel (EulerOS-SA-2021-2745)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In the Linux kernel through 5.13.7, an unprivileged BPF program can obtain sensitive information from kernel memory via a...