CVE-2021-43807

Opencast is vulnerable to HTTP method spoofing in versions prior to 9.10. An attacker can override the intended HTTP method via a URL parameter, turning GET into PUT or form submissions into DELETE, enabling state-changing actions and CSRF bypasses. The issue is fixed in Opencast 9.10 and 10.0. M...

Denial Of Service (DoS)

wireshark:bullseye is vulnerable to denial of service.Buffer overflow in the Bluetooth HCIISO dissector in Wireshark allows denial of service via packet injection or crafted capture file...

Denial Of Service (DoS)

wireshark is vulnerable to denial of service. The vulnerability exists due to a large loop in the Bluetooth DHT dissector which allows denial of service via packet injection or crafted capture file...

Denial Of Service (DoS)

wireshark is vulnerable to denial of service.The vulnerability exists through the buffer overflow in the C12.22 dissector, allowing an attacker to cause denial of service via packet injection or crafted capture file...

CVE-2021-44041: Externally Controlled Reference to a Resource in Another Sphere

UiPath Assistant 21.4.4 will load and execute attacker controlled data from the file path supplied to the --dev-widget argument of the URI handler for uipath-assistant://. This allows an attacker to execute code on a victim's machine or capture NTLM credentials by supplying a networked or WebDAV...

UiPath Assistant security vulnerabilities

UiPath Assistant is a specialized tool from UiPath designed to make interacting with bots from the desktop easy and fun.A security vulnerability exists in UiPath Assistant 21.4.4, which stems from a lack of effective trust management mechanisms in networked systems or products. An attacker could...

Debian DSA-5019-1 : wireshark - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5019 advisory. - Excessive memory consumption in MS-WSP dissector in Wireshark 3.4.0 to 3.4.4 and 3.2.0 to 3.2.12 allows denial of service via packet injection or crafted captur...

Chromium: CVE-2021-4064 Use after free in screen capture

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2021-41030

An authentication bypass by capture-replay vulnerability CWE-294 in FortiClient EMS versions 7.0.1 and below and 6.4.4 and below may allow an unauthenticated attacker to impersonate an existing user by intercepting and re-using valid SAML authentication messages...

CVE-2021-41030

CVE-2021-41030 describes an authentication bypass by capture‑replay in Fortinet FortiClient EMS (versions 7.0.1 and earlier, 6.4.4 and earlier) that could allow an unauthenticated attacker to impersonate an existing user by intercepting and reusing valid SAML authentication messages. The Red Hat ...

CVE-2021-41030

An authentication bypass by capture-replay vulnerability CWE-294 in FortiClient EMS versions 7.0.1 and below and 6.4.4 and below may allow an unauthenticated attacker to impersonate an existing user by intercepting and re-using valid SAML authentication messages...

CVE-2021-41030

An authentication bypass by capture-replay vulnerability CWE-294 in FortiClient EMS versions 7.0.1 and below and 6.4.4 and below may allow an unauthenticated attacker to impersonate an existing user by intercepting and re-using valid SAML authentication messages...

CVE-2021-25522

Insecure storage of sensitive information vulnerability in Smart Capture prior to version 4.8.02.10 allows attacker to access victim's captured images without permission...

CVE-2021-25522

Insecure storage of sensitive information vulnerability in Smart Capture prior to version 4.8.02.10 allows attacker to access victim's captured images without permission...

CVE-2021-25522

Insecure storage of sensitive information vulnerability in Smart Capture prior to version 4.8.02.10 allows attacker to access victim's captured images without permission...

Information disclosure

Insecure storage of sensitive information vulnerability in Smart Capture prior to version 4.8.02.10 allows attacker to access victim's captured images without permission...

CVE-2021-25522

Insecure storage of sensitive information vulnerability in Smart Capture prior to version 4.8.02.10 allows attacker to access victim's captured images without permission...

CVE-2021-25522

CVE-2021-25522 affects Samsung Smart Capture before version 4.8.02.10. The root cause is insecure storage of captured images, allowing an attacker with local access to retrieve victims’ captured images without permission. No exploitation details are provided in the documents. Mitigation: update t...

PT-2021-23055

Name of the Vulnerable Software and Affected Versions FortiClient EMS versions 7.0.1 and below FortiClient EMS versions 6.4.4 and below Description An authentication bypass by capture-replay issue may allow an unauthenticated attacker to impersonate an existing user by intercepting and re-using...

Samsung Smart Capture security vulnerability

Samsung Smart Capture is an APK from Samsung that allows you to select parts of a video during playback and save them as animated GIFs. A security vulnerability exists in Samsung Smart Capture before 4.8.02.10, which stems from the software not storing sensitive information securely and allows an...