CVE-2021-40871

An issue was discovered in Softing Industrial Automation OPC UA C++ SDK before 5.66. Remote attackers to cause a denial of service DoS by sending crafted messages to a OPC/UA client. The client process may crash unexpectedly because of a wrong type cast, and must be restarted...

CVE-2021-40873

The CVE-2021-40873 issue affects Softing Industrial Automation’s OPC UA C++ SDK (pre-5.66) and uaToolkit Embedded (pre-1.40). The vulnerability is a remote-triggered denial of service due to a double-free error that can cause the server process to crash and require restart. Exploitation is descri...

CVE-2021-40871

CVE-2021-40871 affects Softing Industrial Automation’s OPC UA C++ SDK prior to 5.66. Remote attackers can trigger a denial of service by sending crafted messages to an OPC UA client. The vulnerability causes the client process to crash due to an incorrect type cast, requiring a restart. The issue...

GHSA-GP2F-254M-RH32 Unauthorized access to data in @sap-cloud-sdk/core

Impact This affects applications on SAP Business Technology Platform that use the SAP Cloud SDK and enabled caching of destinations. In some cases, when user information was missing, destinations were cached without user information, allowing other users to retrieve the same destination with its...

@enel/tgx-ptw-parametrica (1.0.0), @sap/cds (>=3.34.1, <=3.34.3) +15 more potentially affected by CVE-2021-41251 via @sap-cloud-sdk/core (>=1.18.1, <=1.46.0)

@sap-cloud-sdk/core NPM version =1.18.1, =3.34.1, =1.6.2, =1.1.0, =0.3.7, =1.0.3, =0.1.0, =1.0.0, =1.0.5, =1.202002.1, =1.202004.3 - nikhilesh-model 1.0.0 - opm-dynamic-model 1.0.0 and more Source cves: CVE-2021-41251 Source advisory: OSV:GHSA-GP2F-254M-RH32...

PT-2021-23797

Name of the Vulnerable Software and Affected Versions Open Design Alliance PRC SDK versions prior to 2022.10 Description An out-of-bounds read issue exists in the U3D file reading procedure. Crafted data in a U3D file can trigger a read past the end of an allocated buffer. This can be leveraged b...

CVE-2021-40871: Access of Resource Using Incompatible Type

An issue was discovered in Softing Industrial Automation OPC UA C++ SDK before 5.66. Remote attackers to cause a denial of service DoS by sending crafted messages to a OPC/UA client. The client process may crash unexpectedly because of a wrong type cast, and must be restarted...

PT-2021-23798

Name of the Vulnerable Software and Affected Versions Open Design Alliance Drawings SDK versions prior to 2022.11 Description An Out-of-bounds Read issue exists in the OBJ file reading procedure due to the lack of input length validation, allowing a read past the end of an allocated buffer. This...

PT-2021-22997

Name of the Vulnerable Software and Affected Versions Softing Industrial Automation OPC UA C++ SDK versions prior to 5.66 uaToolkit Embedded versions prior to 1.40 Description An issue was discovered that allows remote attackers to cause a denial of service DoS by sending crafted messages to a...

Open Design Alliance Drawings SDK 资源管理错误漏洞

Open Design Alliance Drawings SDK is a software development kit for drawing design applications from Open Design Alliance, USA. The SDK provides access to data in .dwg and .dgn through a convenient, object-oriented API, offering features such as a C++ API, support for repairing files, and .NET,...

PT-2021-23795

Name of the Vulnerable Software and Affected Versions Open Design Alliance Drawings SDK versions prior to 2022.8 Description A Use After Free vulnerability exists in the DGN file reading procedure. The issue results from the lack of validating the existence of an object prior to performing...

PT-2021-23799

Name of the Vulnerable Software and Affected Versions Open Design Alliance PRC SDK versions prior to 2022.10 Description An out-of-bounds write issue exists in the U3D file reading procedure. Crafted data in a U3D file can trigger a write past the end of an allocated buffer. An attacker can...

PT-2021-22995

Name of the Vulnerable Software and Affected Versions Softing Industrial Automation OPC UA C++ SDK versions prior to 5.66 Description An issue allows remote attackers to cause a denial of service DoS by sending crafted messages to an OPC/UA client. The client process may crash unexpectedly due to...

PT-2021-23794

Name of the Vulnerable Software and Affected Versions Open Design Alliance Drawings SDK versions prior to 2022.11 Description A Use After Free issue exists in the parsing of DWF files due to the lack of validation of an object's existence before performing operations on it. This can be leveraged ...

CVE-2021-40873: Double Free

An issue was discovered in Softing Industrial Automation OPC UA C++ SDK before 5.66, and uaToolkit Embedded before 1.40. Remote attackers to cause a denial of service DoS by sending crafted messages to a client or server. The server process may crash unexpectedly because of a double free, and mus...

.NET 6.0 bugfix and enhancement update

This updates .NET 6 to SDK 6.0.100 RC 2 and Runtime 6.0.0 RC 2...

.NET 6.0 bugfix and enhancement update

An update is available for dotnet6.0. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list This updates .NET 6 to SDK 6.0.100 RC 2 and Runtime 6.0.0 RC 2...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK and IBM Java Runtime affect Rational Business Developer

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 7 and 8 and IBM® Runtime Environment Java™ Version 7 and 8 used by Rational Business Developer. Rational Business Developer has addressed the applicable CVEs. These issues were disclosed as part of the IBM Ja...

Security Bulletin: A vulnerability in IBM Java SDK (July 2021) affects IBM InfoSphere Information Server (CVE-2021-2432)

Summary There is a vulnerability in the IBM® SDK Java™ Technology Edition, Version 8 that is used by IBM InfoSphere Information Server. This issue was disclosed as part of the IBM Java SDK updates in July 2021. Vulnerability Details CVEID: CVE-2021-2432 DESCRIPTION: An unspecified vulnerability i...

Security Bulletin: A vulnerability in IBM Java SDK affects IBM Tivoli Netcool Impact (CVE-2021-2388, CVE-2021-2369, CVE-2021-2432)

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 8 used by IBM Tivoli Netcool Impact. IBM Tivoli Netcool Impact has addressed the applicable CVE. Vulnerability Details CVEID: CVE-2021-2388 DESCRIPTION: An unspecified vulnerability in Java SE related to the ...