CentOS 8 : python3 (CESA-2021:1633)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:1633 advisory. - python: CRLF injection via HTTP request method in httplib/http.client CVE-2020-26116 - python: Unsafe use of eval on data retrieved via HTTP in the...

Moderate: Red Hat Security Advisory: python3 security update

An update for python3 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

CVE-2020-23851

FFJPEG is affected by a stack-based buffer overflow in the jfif_decode(void *ctxt, BMP *pb) function (ffjpeg/src/jfif.c:513:28) that could cause denial of service when processing specially crafted JPEGs. Affected versions are FFJPEG prior to 2020-07-02. Several sources reiterate this flaw (CVE-20...

Security Bulletin: A vulnerability in Java affects IBM Cloud Pak for Multicloud Management Monitoring

Summary Eclipse OpenJ9 is vulnerable to a stack-based buffer overflow when the virtual machine or JNI natives are converting from UTF-8 characters to platform encoding. By sending an overly long string, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause th...

python38:3.8 security update

An update is available for python-psycopg2, python-PyMySQL, python-lxml, python3x-six, python-urllib3, PyYAML, python-jinja2, python-requests, modwsgi, python38, python-asn1crypto, python3x-pip, python-chardet, python-markupsafe, Cython, python-psutil, python-ply, babel, python-wheel,...

ALSA-2021:1761 Moderate: python27:2.7 security and bug fix update

Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types, and dynamic typing. The python27 packages provide a stable release of Python 2.7 with a number of additional utilities and database connectors for...

Moderate: python27:2.7 security and bug fix update

Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types, and dynamic typing. The python27 packages provide a stable release of Python 2.7 with a number of additional utilities and database connectors for...

CVE-2020-23851: Out-of-bounds Write

A stack-based buffer overflow vulnerability exists in ffjpeg through 2020-07-02 in the jfifdecodevoid ctxt, BMP pb function at ffjpeg/src/jfif.c:513:28, which could cause a denial of service by submitting a malicious jpeg image...

ICSA-21-040-06_Siemens JT2Go and Teamcenter Visualization (Update A)

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Siemens Equipment: JT2Go and Teamcenter Visualization Vulnerabilities: Out-of-bounds Read, Improper Restriction of Operations within the Bounds of a Memory Buffer, Stack-based Buffer overflow, Out-of-Bounds Write, Type...

PT-2021-21107

Name of the Vulnerable Software and Affected Versions: KDE KImageFormats versions 5.70.0 through 5.81.0 Description: The issue is a stack-based buffer overflow in the XCFImageFormat::loadTileRLE function. Recommendations: For versions 5.70.0 through 5.81.0, update to a version that contains a fix...

CVE-2021-27413

Omron CX-One Versions 4.60 and prior, including CX-Server Versions 5.0.29.0 and prior, are vulnerable to a stack-based buffer overflow, which may allow an attacker to execute arbitrary code...

PT-2021-17448

Name of the Vulnerable Software and Affected Versions Omron CX-One versions 4.60 and prior Omron CX-Server versions 5.0.29.0 and prior Description The issue is a stack-based buffer overflow, which may allow an attacker to execute arbitrary code. This occurs during the parsing of NCI files in the...

CVE-2021-27413: Stack-based Buffer Overflow

Omron CX-One Versions 4.60 and prior, including CX-Server Versions 5.0.29.0 and prior, are vulnerable to a stack-based buffer overflow, which may allow an attacker to execute arbitrary code...

CVE-2021-27398

Tecnomatix Plant Simulation (all versions

PT-2021-17435

Name of the Vulnerable Software and Affected Versions Tecnomatix Plant Simulation versions prior to V16.0.5 Description A vulnerability has been identified in the PlantSimCore.dll library, which lacks proper validation of user-supplied data when parsing SPP files. This could result in a stack-bas...

CVE-2021-27396: Stack-based Buffer Overflow

A vulnerability has been identified in Tecnomatix Plant Simulation All versions V16.0.5. The PlantSimCore.dll library lacks proper validation of user-supplied data when parsing SPP files. This could result in a stack based buffer overflow, a different vulnerability than CVE-2021-27398. An attacke...

PT-2021-5427

Name of the Vulnerable Software and Affected Versions Fuji Electric V-Server Lite and Tellus Lite V-Simulator versions prior to 4.0.12.0 Description The issue is related to a stack-based buffer overflow that occurs during the parsing of X1 files in the V-Simulator module. This may allow an attack...

PT-2021-17477

Name of the Vulnerable Software and Affected Versions KeyShot versions prior to v10.1 Datakit Software libraries CatiaV5 3dRead, CatiaV6 3dRead, Step3dRead, Ug3dReadPsr, Jt3dReadPsr modules in KeyShot versions v10.1 and prior Description The issue is related to the lack of proper validation of...

CVE-2021-27398: Stack-based Buffer Overflow

A vulnerability has been identified in Tecnomatix Plant Simulation All versions V16.0.5. The PlantSimCore.dll library lacks proper validation of user-supplied data when parsing SPP files. This could result in a stack based buffer overflow, a different vulnerability than CVE-2021-27396. An attacke...

Siemens SIMATIC UltraVNC HMI WinCC Products

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: SIMATIC HMIs/WinCC Products Vulnerabilities: Improper Initialization, Out-of-bounds Read, Heap-based Buffer Overflow, Stack-based Buffer Overflow, Access of Memory Location After End...