All Posts by: Virtual Patching

OpenEXR up to 3.0.0 DwaCompressor integer overflow

A vulnerability classified as problematic has been found in OpenEXR up to 3.0.0. Affected is the function DwaCompressor. Upgrading to

Common Vulnerabilities and Exposures

GitLab Community Edition/Enterprise Edition up to 13.10.4/13.11.4/13.12.1 Merge Request resource consumption

A vulnerability was found in GitLab Community Edition and Enterprise Edition up to 13.10.4/13.11.4/13.12.1 (Bug Tracking Software). It has been

Common Vulnerabilities and Exposures

Django up to 2.2.23/3.1.11/3.2.3 pathname traversal [CVE-2021-33203]

A vulnerability was found in Django up to 2.2.23/3.1.11/3.2.3 (Content Management System). It has been declared as critical. Affected by

Common Vulnerabilities and Exposures

Siemens Mendix SAML Module up to 2.1.1 access control [CVE-2021-33712]

A vulnerability was found in Siemens Mendix SAML Module up to 2.1.1. It has been rated as critical. Affected by

Common Vulnerabilities and Exposures

codeBeamer ALM up to 10.1.SP4 cross-site request forgery [CVE-2020-26516]

A vulnerability classified as problematic has been found in codeBeamer ALM up to 10.1.SP4. This affects some unknown processing. There

Common Vulnerabilities and Exposures

GitLab Community Edition/Enterprise Edition 10.5 Webhook Hacker server-side request forgery

A vulnerability classified as critical was found in GitLab Community Edition and Enterprise Edition 10.5 (Bug Tracking Software). This vulnerability

Common Vulnerabilities and Exposures

Nuvoton NPCT75x 7.4.0.0 TPM access control

A vulnerability, which was classified as critical, has been found in Nuvoton NPCT75x 7.4.0.0. This issue affects an unknown functionality

Common Vulnerabilities and Exposures

Dell EMC NetWorker 18.x up to 19.4.0.1 log file [CVE-2021-21558]

A vulnerability, which was classified as problematic, was found in Dell EMC NetWorker 18.x up to 19.4.0.1. Affected is some

Common Vulnerabilities and Exposures

Squid Web Proxy up to 4.14/5.0.5 HTTP Range Request denial of service

A vulnerability was found in Squid Web Proxy up to 4.14/5.0.5 (Firewall Software). It has been rated as problematic. Affected

Common Vulnerabilities and Exposures

NTPsec 1.2.0 ntpkeygen inadequate encryption

A vulnerability classified as problematic has been found in NTPsec 1.2.0. This affects some unknown functionality of the component ntpkeygen.

Common Vulnerabilities and Exposures

Check Point SSL Network Extender on Linux Client information exposure

A vulnerability classified as problematic was found in Check Point SSL Network Extender on Linux (the affected version is unknown).

Common Vulnerabilities and Exposures

Polaris Office 9.103.83.44230 PDF File PolarisOffice.exe uninitialized pointer

A vulnerability, which was classified as critical, has been found in Polaris Office 9.103.83.44230. This issue affects an unknown code

Common Vulnerabilities and Exposures

Vembu BDR Suite up to 4.1.x GET Request command injection

A vulnerability has been found in Vembu BDR Suite up to 4.1.x and classified as critical. Affected by this vulnerability

Common Vulnerabilities and Exposures

reg-viz reg-suit up to 0.10.15 reg-keygen-git-hash-plugin code injection

A vulnerability was found in reg-viz reg-suit up to 0.10.15 and classified as critical. Affected by this issue is an

Common Vulnerabilities and Exposures

Intland codeBeamer ALM up to 10.1.SP4 Cookie CB_LOGIN cleartext storage

A vulnerability was found in Intland codeBeamer ALM up to 10.1.SP4. It has been classified as problematic. This affects an

Common Vulnerabilities and Exposures

GitLab Enterprise Edition 13.11 Project information disclosure

A vulnerability was found in GitLab Enterprise Edition 13.11 (Bug Tracking Software). It has been declared as problematic. This vulnerability

Common Vulnerabilities and Exposures

GitLab Community Edition/Enterprise Edition 12.8 x.509 Certificate certificate validation

A vulnerability was found in GitLab Community Edition and Enterprise Edition 12.8 (Bug Tracking Software). It has been rated as

Common Vulnerabilities and Exposures

EMQ X Broker up to 4.2.7 memory allocation [CVE-2021-33175]

A vulnerability classified as problematic has been found in EMQ X Broker up to 4.2.7. Affected is an unknown code.

Common Vulnerabilities and Exposures

VerneMQ MQTT Broker up to 1.11.x memory allocation [CVE-2021-33176]

A vulnerability classified as problematic was found in VerneMQ MQTT Broker up to 1.11.x. Affected by this vulnerability is an

Common Vulnerabilities and Exposures

SilverStripe up to 4.6.0-rc1 CSSContentParser xml external entity reference

A vulnerability, which was classified as critical, has been found in SilverStripe up to 4.6.0-rc1 (Content Management System). Affected by

Common Vulnerabilities and Exposures

Night Owl Smart Doorbell 20190505 Push Notification Service cleartext transmission

A vulnerability, which was classified as problematic, was found in Night Owl Smart Doorbell 20190505. This affects an unknown function

Common Vulnerabilities and Exposures

Dell EMC NetWorker 18.x up to 19.4.0.1 certificate validation

A vulnerability has been found in Dell EMC NetWorker 18.x up to 19.4.0.1 and classified as critical. This vulnerability affects

Common Vulnerabilities and Exposures

Zope up to 4.6.0/5.20 TAL Expression pathname traversal

A vulnerability classified as critical was found in Zope up to 4.6.0/5.20 (Application Server Software). Affected by this vulnerability is

Common Vulnerabilities and Exposures

Django up to 2.2.23/3.1.11/3.2.3 access control [CVE-2021-33571]

A vulnerability, which was classified as critical, has been found in Django up to 2.2.23/3.1.11/3.2.3 (Content Management System). Affected by