PT-2021-2307 · Adobe · Acrobat +1

Name of the Vulnerable Software and Affected Versions: Adobe Acrobat Reader DC versions 2020.013.20074 and earlier Adobe Acrobat Reader DC versions 2020.001.30018 and earlier Adobe Acrobat Reader DC versions 2017.011.30188 and earlier Adobe Acrobat versions prior to the fixed version Description:...

PT-2021-2045 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows versions prior to the fixed version Description: The issue is related to a Denial of Service vulnerability in the Windows TCP/IP service, which can be exploited to cause a system crash. It is also associated with errors in privilege...

PT-2021-2082 · Microsoft · Windows +1

Name of the Vulnerable Software and Affected Versions: Microsoft Defender versions prior to the fixed version Description: The issue is related to errors in privilege management in Microsoft Defender, which is part of the Microsoft Windows operating system. Exploitation of this issue may allow an...

Docker < 19.03.15, 20.x < 20.10.3 Multiple Vulnerabilities

Docker is prone to multiple vulnerabilities. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

KLA12060 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. Use after free vulnerability in Payments can be exploited to cause denial of service and...

CVE-2021-21287

Summary: CVE-2021-21287 affects MinIO Browser API. Before version RELEASE.2021-01-30T00-20-58Z, the server is vulnerable to a Server-Side Request Forgery (SSRF) in URL-related functionality (importing/publishing/reading from a URL). An attacker can trick the server into issuing requests to intern...

Apache Guacamole <= 1.2.0 Information Disclosure Vulnerability

Apache Guacamole is prone to an information disclosure vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

FreeBSD : mutt -- denial of service (387bbade-5d1d-11eb-bf20-4437e6ad11c4)

Tavis Ormandy reports : rfc822.c in Mutt through 2.0.4 allows remote attackers to cause a denial of service mailbox unavailability by sending email messages with sequences of semicolon characters in RFC822 address fields aka terminators of empty groups. A small email message from the attacker can...

PT-2021-8108 · Htmldoc +3 · Htmldoc +3

Name of the Vulnerable Software and Affected Versions: htmldoc versions 1.9.11 and earlier Description: The issue is related to a null pointer dereference error, which may allow attackers to execute arbitrary code and cause a denial of service via a crafted HTML file. This could potentially lead ...

Elastic X-Pack Security SAML Vulnerability (ESA-2018-07)

Elastic X-Pack Security is prone to a vulnerability in the SAML implementation. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

QNAP QTS Command Injection Vulnerability (QSA-21-01)

QNAP QTS is prone to an authenticated command injection vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:qnap:qts";...

Fedora: Security Advisory for ocp (FEDORA-2021-24ef21134b)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Cacti 1.2.x < 1.2.17 Multiple Vulnerabilities - Windows

Cacti is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 8 : dotnet3.1 (ELSA-2021-0095)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-0095 advisory. 3.1.111-1.0.1 - Update patch to support 8.3 [email protected] - support OL release scheme [email protected] 3.1.111-1 - Update to .NET...

PT-2021-2114 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 17.4R3-S3 Junos OS versions 18.1R3 between 18.1R3-S6 and 18.1R3-S11 Junos OS versions prior to 18.2R3-S6 Junos OS versions prior to 18.3R3-S4 Junos OS versions prior to 18.4R2-S5 Junos OS versions prior to 18.4R3-S6...

PT-2021-2118 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 15.1R7-S8 Juniper Networks Junos OS 15.1X49 versions prior to 15.1X49-D230 Juniper Networks Junos OS 17.3 versions prior to 17.3R3-S9 Juniper Networks Junos OS 17.4 versions prior to 17.4R2-S12,...

KLA12207 Security UI vulnerability in Cisco Jabber

A security UI vulnerability was found in Cisco Jabber. Malicious users can exploit this vulnerability to obtain sensitive information, spoof user interface. Original advisories Cisco Jabber and Webex Client Software Shared File Manipulation Vulnerability Related products Cisco-Jabber CVE list...

PT-2021-21416 · Qpdf +4 · Qpdf +4

Name of the Vulnerable Software and Affected Versions: QPDF versions 9.x through 9.1.1 QPDF versions 10.x through 10.0.4 Description: The issue is a heap-based buffer overflow in Pl ASCII85Decoder::write, which is called from Pl AES PDF::flush and Pl AES PDF::finish, occurring when a certain...

PT-2020-9351 · Dropbear +1 · Dropbear +1

Name of the Vulnerable Software and Affected Versions: Dropbear versions 2011.54 through 2018.76 Description: The issue is related to an inconsistent failure delay that may lead to revealing valid usernames. Recommendations: For versions 2011.54 through 2018.76, update to a version that addresses...

PT-2020-6429 · Otrs Ag +1 · Otrs +2

Name of the Vulnerable Software and Affected Versions: OTRS AG OTRS Community Edition versions 6.0.1 and later OTRS AG OTRS versions 7.0.x through 7.0.26 OTRS AG OTRS versions 8.0.x through 8.0.13 Description: The issue is related to deficiencies in handling exceptional states in the OTRS ticket...