CVE-2021-35522

A Buffer Overflow in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices before 2.6.2, Sigma devices before 4.9.4, and MA VP MD devices before 4.9.7 allows remote attackers to achieve code execution, denial of services, and information disclosure via TCP/IP packets...

CVE-2021-35522

CVE-2021-35522 affects IDEMIA Morpho Wave Compact and VisionPass devices before 2.6.2, Sigma devices before 4.9.4, and MA VP MD devices before 4.9.7. A buffer overflow in the Thrift command handlers allows remote attackers to cause code execution, denial of service, and information disclosure via...

CVE-2021-35521

CVE-2021-35521 affects IDEMIA Morpho Wave Compact and VisionPass devices prior to version 2.6.2. A path traversal in the Thrift command handlers allows remote authenticated attackers to cause denial of service and information disclosure over TCP/IP packets. The vulnerability is exploitable by aut...

CVE-2021-35521

A path traversal in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices before 2.6.2 allows remote authenticated attackers to achieve denial of services and information disclosure via TCP/IP packets...

CVE-2021-35520

CVE-2021-35520 describes a buffer overflow in the Thrift command handlers of IDEMIA Morpho Wave Compact and VisionPass devices prior to version 2.6.2. The flaw allows physically proximate, authenticated attackers to achieve code execution , denial of service , and information disclosure via the s...

IDEMIA Morpho Wave Compact 缓冲区错误漏洞

IDEMIA Morpho Wave Compact is an industrial control device from idemia. Contactless fingerprint scanner. A security vulnerability exists in IDEMIA Morpho Wave Compact and VisionPass devices prior to version 2.6.2, which originates from a buffer overflow in the Thrift command handler in the device...

IDEMIA Morpho Wave Compact 路径遍历漏洞

IDEMIA Morpho Wave Compact is an industrial control device from idemia. Contactless fingerprint scanner. A security vulnerability in IDEMIA Morpho Wave Compact and VisionPass devices prior to version 2.6.2, which originates from path traversal in the Thrift command handler in the device, allows...

IDEMIA Morpho Wave Compact缓冲区错误漏洞

IDEMIA Morpho Wave Compact is an industrial control device from idemia. Contactless fingerprint scanner. A security vulnerability exists in IDEMIA Morpho Wave Compact and VisionPass devices prior to version 2.6.2, which originates from a buffer overflow in the Thrift command handler in the device...

DEBIAN-CVE-2021-3246

A heap buffer overflow vulnerability in msadpcmdecodeblock of libsndfile 1.0.30 allows attackers to execute arbitrary code via a crafted WAV file...

UBUNTU-CVE-2021-3246

A heap buffer overflow vulnerability in msadpcmdecodeblock of libsndfile 1.0.30 allows attackers to execute arbitrary code via a crafted WAV file...

Update 17.8 for Microsoft Dynamics 365 Business Central 2020 Release Wave 2 (Application Build 17.8.27267, Platform Build 17.0.27235)

None None...

Update 18.3 for Microsoft Dynamics 365 Business Central 2021 Release Wave 1 (Application Build 18.3.27480, Platform Build 18.0.27469)

None None...

The vulnerability of the ParseWave64HeaderConfig function in the wave64.c component of the WavPack audio codec, related to the use of previously uninitialized variables, allows a hacker to cause a service failure.

The vulnerability of the ParseWave64HeaderConfig function in the wave64.c component of the WavPack audio codec is related to the use of previously uninitialized variables. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a malicious .wav file...

The vulnerability of the ParseCaffHeaderConfig function in the caff.c component of the WavPack audio codec allows a hacker to cause a service failure. This vulnerability stems from the use of uninitialized variables, which can be exploited by attackers.

The vulnerability of the ParseCaffHeaderConfig function in the caff.c component of the WavPack audio codec is related to the use of previously uninitialized variables. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a malicious .wav file...

Microsoft is a Leader in the 2021 Forrester Endpoint Security Software as a Service Wave

We are excited to share that Microsoft has been named a Leader in The Forrester Wave: Endpoint Security Software as a Service, Q2 20211, receiving one of the highest scores in the strategy category and among the top three scores in the current offering category. Forrester notes that “the focus on...

Microsoft is a Leader in the 2021 Forrester Endpoint Security Software as a Service Wave

We are excited to share that Microsoft has been named a Leader in The Forrester Wave: Endpoint Security Software as a Service, Q2 20211, receiving one of the highest scores in the strategy category and among the top three scores in the current offering category. Forrester notes that “the focus on...

Microsoft recognized as a Leader in The Forrester Wave™: Unstructured Data Security Platforms, Q2 2021

In this new world of hybrid work, organizations face an increasing volume of data, ever-evolving regulations around how that data is protected, and an evolving complexity and frequency of data security breaches. To help our customers navigate this complex data landscape, we are focused on...

Command Execution Vulnerability in Wave ClusterEngine (CNVD-2021-39845)

Wave ClusterEngine is a job management software customized for Wave Tissot series HPC products. A command execution vulnerability exists in Wave ClusterEngine, which can be exploited by an attacker to execute arbitrary commands...

UBUNTU-CVE-2021-20309

A flaw was found in ImageMagick in versions before 7.0.11 and before 6.9.12, where a division by zero in WaveImage of MagickCore/visual-effects.c may trigger undefined behavior via a crafted image file submitted to an application using ImageMagick. The highest threat from this vulnerability is to...

Weak Password Vulnerability in Management System of Wave Group Ltd.

The business of Wave Group Limited covers cloud data center, cloud service big data, smart city, smart enterprise and other business segments, forming a total solution service capability covering four levels: infrastructure, platform software, data information and application software, etc. A wea...