5759 matches found
Emerson Electric Emerson DeltaV Distributed Control System code-related vulnerabilities
Emerson Electric Emerson DeltaV Distributed Control System is an automated distributed control system from Emerson Electric. The system includes features such as network security management, alarm management, batch control, and change management. A code issue vulnerability exists in Emerson Delta...
PT-2021-8126 · Linux +3 · Linux Kernel +3
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to incorrect locking of resources in the mac80211 component of the Linux kernel. This could allow an attacker to cause a denial of service. The problem is...
CVE-2021-45041
SuiteCRM before 7.12.2 and 8.x before 8.0.1 allows authenticated SQL injection via the Tooltips action in the Project module, involving resourceid and startdate...
PT-2021-24193 · Suitecrm · Suitecrm
Name of the Vulnerable Software and Affected Versions: SuiteCRM versions 7.12.2 and earlier, 8.x versions prior to 8.0.1 Description: The issue allows authenticated SQL injection via the Tooltips action in the Project module, involving resource id and start date. This can be exploited by...
CVE-2021-32498
SICK SOPAS ET before version 4.8.0 allows attackers to manipulate the pathname of the emulator and use path traversal to run an arbitrary executable located on the host system. When the user starts the emulator from SOPAS ET the corresponding executable will be started instead of the emulator...
CVE-2021-44042
An issue was discovered in UiPath Assistant 21.4.4. User-controlled data supplied to the --process-start argument of the URI handler for uipath-assistant:// is not correctly encoded, resulting in attacker-controlled content being injected into the error message displayed when the injected content...
CVE-2021-44042
An issue was discovered in UiPath Assistant 21.4.4. User-controlled data supplied to the --process-start argument of the URI handler for uipath-assistant:// is not correctly encoded, resulting in attacker-controlled content being injected into the error message displayed when the injected content...
UiPath Assistant injection vulnerability
UiPath Assistant is a specialized tool for UiPath designed to make it easy and fun for users to interact with bots from the desktop. UiPath Assistant 21.4.4 suffers from a security vulnerability that stems from user control data provided to the --process-start parameter of the uipath-assistant://...
PT-2021-24028
Name of the Vulnerable Software and Affected Versions: UiPath Assistant version 21.4.4 Description: An issue was discovered where user-controlled data supplied to the --process-start argument of the URI handler for "uipath-assistant://" is not correctly encoded. This results in attacker-controlle...
getRemainingRewards might fail unexpectedly
Handle certora Vulnerability details getRemainingRewards might fail unexpectedly. getRemainingRewards calls getRemainingRewards which calls getCurrentEpochId: function getCurrentEpochIdPromotion memory promotion internal view returns uint256 // elapsedTimestamp / epochDurationTimestamp return...
ALPINE-CVE-2021-43803
Next.js is a React framework. In versions of Next.js prior to 12.0.5 or 11.1.3, invalid or malformed URLs could lead to a server crash. In order to be affected by this issue, the deployment must use Next.js versions above 11.1.0 and below 12.0.5, Node.js above 15.0.0, and next start or a custom...
CVE-2021-43803
Next.js is a React framework. In versions of Next.js prior to 12.0.5 or 11.1.3, invalid or malformed URLs could lead to a server crash. In order to be affected by this issue, the deployment must use Next.js versions above 11.1.0 and below 12.0.5, Node.js above 15.0.0, and next start or a custom...
CVE-2021-43803: Improper Input Validation
Next.js is a React framework. In versions of Next.js prior to 12.0.5 or 11.1.3, invalid or malformed URLs could lead to a server crash. In order to be affected by this issue, the deployment must use Next.js versions above 11.1.0 and below 12.0.5, Node.js above 15.0.0, and next start or a custom...
November 22, 2021—KB5007266 (OS Build 17763.2330) Preview
None None...
Security update for barrier (moderate)
openSUSE Security Update: Security update for barrier Announcement ID: openSUSE-SU-2021:1498-1 Rating: moderate References: Cross-References: CVE-2021-42072 CVE-2021-42073 Affected Products: openSUSE Leap 15.2 An update that fixes two vulnerabilities is now available. Description: This update for...
PT-2021-17002
Name of the Vulnerable Software and Affected Versions AMD SEV Firmware affected versions not specified Description The issue is related to insufficient validation of the AMD SEV Signing Key ASK in the SEND START command in the SEV Firmware. This may allow a local authenticated attacker to perform...
PT-2021-30571
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.15 Description The issue is related to the blk-cgroup, specifically the blk cgroup bio start function, which should use irq-safe operations on blkg-iostat cpu. The actual impact and attack plausibility have...
PT-2021-26645
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 5.13 through 5.15 Description: The issue is related to the blk-cgroup, specifically the blk cgroup bio start function, which should use irq-safe operations on blkg-iostat cpu. The actual impact and attack plausibility ha...
PT-2021-30634
Name of the Vulnerable Software and Affected Versions Linux Kernel versions 5.4 through 5.14 Description The issue is related to a use-after-free UAF bug in the j1939 netdev start function, specifically affecting the rx kref of j1939 priv. This bug was introduced in version v5.4 and fixed in...
PT-2021-30473
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.156 Description The issue concerns a problem with stack handling in the idle kvm start guest function. The actual impact and potential for attack have not been confirmed. Recommendations For Linux Kernel...