CVE-2021-37583

MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. Affected Chipsets MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915; Affected Software Versions 2.0.2; Out-of-bounds write...

Bentley View Code Execution Vulnerability (CNVD-2021-102052)

Bentley View is a free viewer from Bentley Systems, Inc. A security vulnerability exists in Bentley View, which is caused by out-of-bounds writes when parsing JT files. An attacker could exploit this vulnerability to execute arbitrary code on the system...

Bentley View Code Execution Vulnerability (CNVD-2021-102046)

Bentley View is a free viewer from Bentley Systems, Inc. A security vulnerability exists in Bentley View, which is caused by out-of-bounds writes when parsing JT files. An attacker could exploit this vulnerability to execute arbitrary code on the system...

Bentley View Code Execution Vulnerability (CNVD-2021-102054)

Bentley View is a free viewer from Bentley Systems, Inc. A security vulnerability exists in Bentley View, which is caused by out-of-bounds writes when parsing JT files. An attacker could exploit this vulnerability to execute arbitrary code on the system...

Bentley View Code Execution Vulnerability (CNVD-2021-102049)

Bentley View is a free viewer from Bentley Systems, Inc. A security vulnerability exists in Bentley View, which is caused by out-of-bounds writes when parsing JT files. An attacker could exploit this vulnerability to execute arbitrary code on the system...

JT Utilities and JTTK file parsing vulnerabilities

JT is a publicly released data format developed by Siemens Digital Industry Software.JT Open Toolkit also known as JTTK is developer-oriented application programming interface API JT-enabled software.JT Open Toolkit is a read and write toolkit.JT Utilities and JTTK file parsing vulnerabilities. A...

Bentley View Code Execution Vulnerability (CNVD-2021-102050)

Bentley View is a free viewer from Bentley Systems, USA. A security vulnerability exists in Bentley View due to an out-of-bounds write when parsing a JT file. An attacker can exploit this vulnerability to execute arbitrary code on the system...

CVE-2021-4093

A flaw was found in the KVM's AMD code for supporting the Secure Encrypted Virtualization-Encrypted State SEV-ES. A KVM guest using SEV-ES can trigger out-of-bounds reads and writes in the host kernel via a malicious VMGEXIT for a string I/O instruction for example, outs or ins using the exit...

The vulnerability of the Adobe Digital Editions e-book reading program lies in the creation of temporary files with insecure permissions, allowing a hacker to perform arbitrary writes to the file system.

The vulnerability of the Adobe Digital Editions e-book reading program lies in the creation of temporary files with insecure permissions. Exploiting this vulnerability could allow a malicious actor to perform arbitrary writes to the file system using a specially crafted file...

The vulnerability of the endpoint of the Cisco Application Policy Infrastructure Controller, related to access control deficiencies, allows a hacker to write arbitrary files.

The vulnerability of the endpoint of the Cisco Application Policy Infrastructure Controller API is related to lack of access control. Exploiting this vulnerability could allow a malicious actor to write arbitrary files...

SUSE SLES15: libnetcdf-gnu-hpc / libnetcdf-gnu-mpich-hpc / etc (SUSE-SU-2021:3815-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3815-1 advisory. - Fixed multiple vulnerabilities in ezXML: CVE-2019-20007, CVE-2019-20006, CVE-2019-20201, CVE-2019-20202, CVE-2019-20199, CVE-2019-20200,...

PT-2021-23930 · Unknown · @Backstage/Plugin-Scaffolder-Backend

Name of the Vulnerable Software and Affected Versions: @backstage/plugin-scaffolder-backend versions prior to 0.15.14 Description: A malicious actor with write access to a registered scaffolder template can manipulate the template to write files to arbitrary paths on the scaffolder-backend host...

CVE-2021-28710

CVE-2021-28710 affects the Xen hypervisor on x86 VT-d IOMMUs when sharing page tables. The bug arises because the top-level strip of the 3-level page tables was skipped while inserting the root page-table address into the hardware pagetable base register, allowing a guest to write to leaf page-ta...

CVE-2021-43555

mySCADA myDESIGNER Versions 8.20.0 and prior fails to properly validate contents of an imported project file, which may make the product vulnerable to a path traversal payload. This vulnerability may allow an attacker to plant files on the file system in arbitrary locations or overwrite existing...

Oracle Linux 8 : freerdp (ELSA-2021-4622)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-4622 advisory. 2:2.2.0-7 - Updated: Refactored RPC gateway parser rhbz2017948 + fixed issues discovered by Covscan 2:2.2.0-6 - Refactored RPC gateway parser rhbz20179...

UVI-2021-1002196 drm/amdgpu: Fix even more out of bound writes from debugfs

drm/amdgpu: Fix even more out of bound writes from debugfs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15 by commit...

UVI-2021-1002128 drm/amdgpu: Fix even more out of bound writes from debugfs

drm/amdgpu: Fix even more out of bound writes from debugfs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.16 by commit...

PT-2021-30593

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.16 Description The issue concerns out of bound writes from debugfs in the drm/amdgpu component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2021-26666

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15 Description: The issue concerns out of bound writes from debugfs in the drm/amdgpu component. It was introduced in version v5.10 and fixed in version v5.15. The actual impact and attack plausibility have n...

PT-2021-26598

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.16 Description The issue concerns out of bound writes from debugfs in the drm/amdgpu component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...