FATEK Automation WinProladder

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: FATEK Automation Equipment: WinProladder Vulnerabilities: Out-of-bounds Read, Out-of-bounds Write, Improper Restriction of Operations within the Bounds of a Memory Buffer 2. RISK EVALUATION Successful exploitation of these...

PT-2021-5840

Name of the Vulnerable Software and Affected Versions vsftpd affected versions not specified Sendmail affected versions not specified Nginx affected versions not specified Description The issue is related to an application layer protocol content confusion attack, exploiting TLS servers implementi...

PT-2021-8091 · Unknown +6 · Ansible Engine +6

Name of the Vulnerable Software and Affected Versions: Ansible Engine versions prior to 2.8.15 Description: A flaw was found in Ansible Engine's ansible-connection module, where sensitive information such as the Ansible user credentials is disclosed by default in the traceback error message. The...

PT-2021-24337 · Mariadb +7 · Mariadb +8

Name of the Vulnerable Software and Affected Versions: MariaDB versions prior to 10.6.2 Description: The issue allows an application crash via certain subquery uses of ORDER BY. This is related to the get sort by table function in MariaDB. Recommendations: For MariaDB versions prior to 10.6.2,...

PT-2021-7501 · Mariadb +10 · Mariadb Server +10

Name of the Vulnerable Software and Affected Versions: MariaDB Server versions 10.6.3 and below Description: An issue in the component my decimal::operator= of MariaDB Server was discovered to allow attackers to cause a Denial of Service DoS via specially crafted SQL statements. The vulnerability...

Is this the “Summer of Cybercrime”?

Summer is just around the corner, and malicious actors don’t seem to be planning a vacation as cybercrime continues to ramp up. Learn some security recommendation you can implement to help minimize the risk of compromise...

PT-2021-18047

Name of the Vulnerable Software and Affected Versions: Liferay DXP versions 7.0 through 7.0 before fix pack 99 Liferay DXP versions 7.1 through 7.1 before fix pack 23 Liferay DXP versions 7.2 through 7.2 before fix pack 12 Liferay DXP versions 7.3 through 7.3 before fix pack 1 Description: A...

PT-2021-17542 · Sap · Abap Platform +1

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver ABAP Server and ABAP Platform Enqueue Server versions 7.22, 7.22EXT, 7.49, 7.53, 7.73, 8.04 Description: The issue allows an unauthenticated attacker without specific knowledge of the system to send a specially crafted packet ov...

Intel® IPP and SGX Software Advisory

Summary: A potential security vulnerability in the Intel® Integrated Performance Primitives IPP Crypto Library may allow information disclosure. Intel® IPP is used by Intel® Software Guard Extension SGX, and Intel is releasing software updates to mitigate this potential vulnerability. Vulnerabili...

Intel Unite® Client for Windows Advisory

Summary: Potential security vulnerabilities in the Intel Unite® Client for Windows may allow escalation of privilege. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2021-0112 Description: Unquoted service path in the Intel UniteR...

Intel® RealSense™ ID Advisory

Summary: Potential security vulnerabilities in the Intel® RealSense™ ID may allow escalation of privilege. Intel is releasing prescriptive guidance to address these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2020-24515 Description: Protection mechanism failure in some IntelR...

Intel® ProSet/Wireless WiFi Driver Advisory

Summary: A potential security vulnerability in some Intel® ProSet/Wireless WiFi drivers may allow information disclosure and denial of service. Intel is releasing a software update to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2021-0105 Description: Insecure inherite...

2021.1 IPU - Intel Atom® Processor Advisory

Summary: A potential security vulnerability in some Intel Atom® Processors may allow information disclosure. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2020-24513 Description: Domain-bypass transient execution vulnerability in...

PT-2021-7065

Name of the Vulnerable Software and Affected Versions Libgcrypt versions 1.8.7 and earlier Libgcrypt versions 1.9.x before 1.9.3 Description The issue is related to the mishandling of ElGamal encryption due to the lack of exponent blinding, making it vulnerable to a side-channel attack against mp...

PT-2021-19975 · Rockwell Automation · Micro800 +1

Name of the Vulnerable Software and Affected Versions: Micro800 versions All MicroLogix 1400 versions 21 and later Description: This issue allows an attacker to intercept and replace a legitimate new password hash with an illegitimate one during an authenticated password change request. This...

PT-2021-7435 · Nginx · Nginx Controller

Name of the Vulnerable Software and Affected Versions: NGINX Controller versions 2.0.0 through 2.9.0 NGINX Controller versions 3.x before 3.15.0 Description: The issue is related to insufficient protection of registration data, which may allow an attacker to disclose protected information...

PT-2021-16719 · Apache · Apache Dubbo

Name of the Vulnerable Software and Affected Versions: Apache Dubbo versions prior to 2.6.9 and 2.7.9 Apache Dubbo versions prior to 2.6.9 and 2.7.10 Apache Dubbo versions prior to 2.6.12 and 2.7.15 However, to consolidate the ranges of affected versions into the most concise form and avoid...

PT-2021-5441 · Apple · Ipados +4

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.4 tvOS versions prior to 14.6 watchOS versions prior to 7.5 iOS versions prior to 14.6 iPadOS versions prior to 14.6 Description: A logic issue was addressed with improved state management, which could allow a...

Recycle Your Phone, Sure, But Maybe Not Your Number

Many online services allow users to reset their passwords by clicking a link sent via SMS, and this unfortunately widespread practice has turned mobile phone numbers into de facto identity documents. Which means losing control over one thanks to a divorce, job termination or financial crisis can ...

Why Password Hygiene Needs a Reboot

In today's digital world, password security is more important than ever. While biometrics, one-time passwords OTP, and other emerging forms of authentication are often touted as replacements to the traditional password, today, this concept is more marketing hype than anything else. But just becau...