Security update for gstreamer, gstreamer-plugins-bad, gstreamer-plugins-base, gstreamer-plugins-good, gstreamer-plugins-ugly (important)

openSUSE Security Update: Security update for gstreamer, gstreamer-plugins-bad, gstreamer-plugins-base, gstreamer-plugins-good, gstreamer-plugins-ugly Announcement ID: openSUSE-SU-2021:1819-1 Rating: important References: 1181255 SLE-13843 Cross-References: CVE-2021-3185 CVSS scores: CVE-2021-318...

Should check return data from Chainlink aggregators

Handle shw Vulnerability details Impact The getEtherPrice function in the contract FSDNetwork fetches the ETH price from a Chainlink aggregator using the latestRoundData function. However, there are no checks on roundID nor timeStamp, resulting in stale prices. Proof of Concept Referenced code:...

CVE-2021-27188

The Sovremennye Delovye Tekhnologii FX Aggregator terminal client 1 allows attackers to cause a denial of service access suspended for five hours by making five invalid login attempts to a victim's account...

CVE-2021-27188

The Sovremennye Delovye Tekhnologii FX Aggregator terminal client 1 allows attackers to cause a denial of service access suspended for five hours by making five invalid login attempts to a victim's account...

CVE-2021-27187

The Sovremennye Delovye Tekhnologii FX Aggregator terminal client 1 stores authentication credentials in cleartext in login.sav when the Save Password box is checked...

CVE-2021-27187

The Sovremennye Delovye Tekhnologii FX Aggregator terminal client 1 stores authentication credentials in cleartext in login.sav when the Save Password box is checked...

Code injection

The Sovremennye Delovye Tekhnologii FX Aggregator terminal client 1 allows attackers to cause a denial of service access suspended for five hours by making five invalid login attempts to a victim's account...

CVE-2021-27188

The Sovremennye Delovye Tekhnologii FX Aggregator terminal client 1 allows attackers to cause a denial of service access suspended for five hours by making five invalid login attempts to a victim's account...

CVE-2021-27187

The Sovremennye Delovye Tekhnologii FX Aggregator terminal client 1 stores authentication credentials in cleartext in login.sav when the Save Password box is checked...

CVE-2021-27188

The Sovremennye Delovye Tekhnologii FX Aggregator terminal client 1 allows attackers to cause a denial of service access suspended for five hours by making five invalid login attempts to a victim's account...

CVE-2021-27188

The CVE-2021-27188 entry concerns the Sovremennye Delovye Tekhnologii FX Aggregator terminal client 1. Impact is a denial of service: an attacker can trigger an access suspension of five hours by making five invalid login attempts. The root cause is not explicitly detailed in the available docume...

CVE-2021-27187

The Sovremennye Delovye Tekhnologii FX Aggregator terminal client 1 stores authentication credentials in cleartext in login.sav when the Save Password box is checked...

CVE-2021-27187

The FX Aggregator terminal client 1 from Sovremennye Delovye Tekhnologii stores authentication credentials in cleartext in login.sav when the Save Password box is checked. Affected item: login credential storage within the client. Root cause: credentials are kept unencrypted in a local file. Impa...

Sovremennye Delovye Tekhnologii FX Aggregator Security Breach

A security vulnerability exists in Sovremennye Delovye Tekhnologii FX Aggregator that can be exploited by an attacker to cause a denial of service by making five invalid login attempts to a victim's account...

CVE-2021-27187: Insufficiently Protected Credentials

The Sovremennye Delovye Tekhnologii FX Aggregator terminal client 1 stores authentication credentials in cleartext in login.sav when the Save Password box is checked...

PT-2021-17306

Name of the Vulnerable Software and Affected Versions: Sovremennye Delovye Tekhnologii FX Aggregator terminal client version 1 Description: The issue concerns the storage of authentication credentials in cleartext in the login.sav file when the Save Password box is checked. This affects the...

Sovremennye Delovye Tekhnologii FX Aggregator Security Breach

A security vulnerability exists in Sovremennye Delovye Tekhnologii FX that originates from storing authentication credentials in plaintext during login...

CVE-2021-27188: Improper Restriction of Excessive Authentication Attempts

The Sovremennye Delovye Tekhnologii FX Aggregator terminal client 1 allows attackers to cause a denial of service access suspended for five hours by making five invalid login attempts to a victim's account...

PT-2021-17307

Name of the Vulnerable Software and Affected Versions: Sovremennye Delovye Tekhnologii FX Aggregator terminal client version 1 Description: The issue allows attackers to cause a denial of service by making five invalid login attempts to a victim's account, resulting in access being suspended for...

CVE-2020-27265

KEPServerEX: v6.0 to v6.9, ThingWorx Kepware Server: v6.8 and v6.9, ThingWorx Industrial Connectivity: All versions, OPC-Aggregator: All versions, Rockwell Automation KEPServer Enterprise, GE Digital Industrial Gateway Server: v7.68.804 and v7.66, Software Toolbox TOP Server: All 6.x versions are...