PT-2021-7758 · Libxml2 +2 · Libxml2 +2

Name of the Vulnerable Software and Affected Versions: ImageMagick versions prior to 7.0.10-31 Description: The issue is related to a NULL pointer dereference flaw in the ReadSVGImage function of the coders/svg.c component. This flaw is caused by not checking the return value from libxml2's...

PT-2021-7762 · Rockwell Automation · Isagraf Runtime

Name of the Vulnerable Software and Affected Versions: Rockwell Automation ISaGRAF Runtime versions 4.x through 5.x Description: The issue concerns the encryption of passwords used to execute privileged commands in the ISaGRAF Runtime. Specifically, a fixed key value is used with the tiny...

PT-2021-3269 · Microsoft · Sharepoint Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Foundation affected versions not specified Microsoft SharePoint Enterprise Server affected versions not specified Description: The vulnerability is related to a...

PT-2021-7993 · Libslirp +9 · Libslirp +9

Name of the Vulnerable Software and Affected Versions: libslirp versions prior to 4.6.0 Description: The issue is related to an invalid pointer initialization in the SLiRP networking implementation, specifically in the tftp input function. This flaw can occur when processing a UDP packet smaller...

PT-2021-15597 · Mcafee · Mcafee Database Security

Name of the Vulnerable Software and Affected Versions: McAfee Database Security versions prior to 4.8.2 Description: The issue allows a remote authenticated attacker to create a reverse shell with administrator privileges on the DBSec server via carefully constructed Java serialized object sent t...

PT-2021-15596 · Mcafee · Mcafee Database Security

Name of the Vulnerable Software and Affected Versions: McAfee Database Security versions prior to 4.8.2 Description: The issue allows a remote unauthenticated attacker to create a reverse shell with administrator privileges on the DBSec server via carefully constructed Java serialized object sent...

PT-2021-9681 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server versions 2.4.0 through 2.4.46 Description: The issue allows unprivileged local users to stop the httpd service on Windows. This was discovered by Ivan Zhakov. Recommendations: For Apache HTTP Server versions 2.4.0 through...

PT-2021-8015 · Zeromq +2 · Zeromq +2

Name of the Vulnerable Software and Affected Versions: ZeroMQ versions prior to 4.3.3 Description: A flaw in the ZeroMQ server allows a malicious client to cause a stack buffer overflow on the server by sending crafted topic subscription requests and then unsubscribing. This poses a threat to...

PT-2021-8690 · Red Hat · Redhat-Certification

Name of the Vulnerable Software and Affected Versions: redhat-certification version 7 Description: The issue is related to improper configuration, which allows listing of all files and directories in the /var/www/rhcert/store/transfer directory through the "/rhcert-transfer" API endpoint. This...

PT-2021-16927 · Joomla · Joomla!

Name of the Vulnerable Software and Affected Versions: Joomla! versions 3.0.0 through 3.9.26 Description: A missing token check causes a CSRF issue in data download endpoints in com banners and com sysinfo. This allows for potential exploitation. Recommendations: For Joomla! versions 3.0.0 throug...

PT-2021-3346 · 3S Smart Software Solutions · Codesys V2 Runtime System

Name of the Vulnerable Software and Affected Versions: CODESYS V2 runtime system SP versions prior to 2.4.7.55 Description: The issue is a stack-based buffer overflow in the CODESYS V2 runtime system SP. This can be exploited by a remote attacker to impact the confidentiality, integrity, and...

PT-2021-3339 · 3S Smart Software Solutions · Codesys V2 Web-Server

Name of the Vulnerable Software and Affected Versions: CODESYS V2 Web-Server versions prior to 1.1.9.20 Description: The issue is caused by a buffer copy without checking the size of the input, which can lead to a buffer overflow on the stack. This can allow a remote attacker to cause a denial of...

PT-2021-3338 · 3S Smart Software Solutions · Codesys V2 Web-Server

Name of the Vulnerable Software and Affected Versions: CODESYS V2 Web-Server versions prior to 1.1.9.20 Description: The issue is related to improper access control in the CODESYS V2 Web-Server, which can be exploited by a remote attacker to impact the confidentiality, integrity, and availability...

PT-2021-18772 · Google +2 · Google Chrome +2

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 91.0.4472.77 Description: Insufficient policy enforcement in content security policy allowed a remote attacker to bypass content security policy via a crafted HTML page. The issue has a security severity of...

PT-2021-20159 · Dutchcoders · Transfer.Sh

Name of the Vulnerable Software and Affected Versions: Dutchcoders transfer.sh versions prior to 1.2.4 Description: The issue allows Directory Traversal, which can be used for deleting files. This can potentially lead to unauthorized access and modification of sensitive data. Recommendations: For...

PT-2021-19708 · Sitel · Sitel Cap/Prx

Name of the Vulnerable Software and Affected Versions: SITEL CAP/PRX firmware version 5.2.01 Description: The issue allows an attacker with access to the local network of the device to obtain authentication passwords by analyzing network traffic. Recommendations: For SITEL CAP/PRX firmware versio...

PT-2021-10688

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10 Description: A heap-based buffer overflow issue exists in GNU LibreDWG. The problem is related to the bit read RC function in the bits.c file. Recommendations: For GNU LibreDWG version 0.10, consider restricting acce...

PT-2021-10668

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10.2641 Description: A heap-based buffer overflow issue exists in the software. The issue is related to the output TEXT function in the dwg2SVG.c file at line 114. Recommendations: For GNU LibreDWG version 0.10.2641,...

PT-2021-13890 · Mongodb · Mongodb C Driver

Name of the Vulnerable Software and Affected Versions: MongoDB C Driver versions 2.12.0 through 2.12.1 Description: The MongoDB C Driver may erroneously publish events containing authentication-related data to a command listener configured by an application. The published events may contain...

PT-2021-3426 · Adobe · Magento

Name of the Vulnerable Software and Affected Versions: Magento versions 2.4.2 and earlier Magento versions 2.4.1-p1 and earlier Magento versions 2.3.6-p1 and earlier Description: The issue is related to a Violation of Secure Design Principles vulnerability in RMA PDF filename formats, which could...