563 matches found
CVE-2021-3729
CVE-2021-3729 affects the Firefly III project (firefly-iii). The connected documents confirm a Cross-Site Request Forgery (CSRF) vulnerability in firefly-iii but do not provide concrete technical details such as affected versions, root cause, specific components, impact scope, or fixes. The entri...
CVE-2021-3729 Cross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-3728 Cross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-3728
The provided documents confirm CVE-2021-3728 affects the open-source project firefly-iii and is described as a Cross‑Site Request Forgery (CSRF) vulnerability. Concrete details in the connected documents show the issue is labeled as CSRF across multiple sources (Red Hat, OSV, GitHub advisories, C...
firefly-iii 跨站请求伪造漏洞
firefly-iii is a free and open source personal finance manager. firefly-iii suffers from a cross-site request forgery vulnerability, which can be exploited by attackers to conduct cross-site request forgery attacks...
CVE-2021-3730: Cross-Site Request Forgery (CSRF)
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-3728: Cross-Site Request Forgery (CSRF)
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
firefly-iii 跨站请求伪造漏洞
firefly-iii is a free and open source personal finance manager. firefly-iii suffers from a cross-site request forgery vulnerability, which can be exploited by attackers to conduct cross-site request forgery attacks...
firefly-iii 跨站请求伪造漏洞
firefly-iii is a free and open source personal finance manager. firefly-iii is vulnerable to cross-site request forgery, and no detailed vulnerability details are currently available...
CVE-2021-3729: Cross-Site Request Forgery (CSRF)
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
TP-Link UE330 USB Information Disclosure Vulnerability
TP-Link UE330 USB is a port USB 3.0 hub. TP-Link UE330 USB has a security vulnerability that could be exploited by remote attackers to recover voice signals from LEDs on the device through binoculars and photoelectric sensors to conduct "firefly" attacks...
MIRACASE MHUB500 USB splitters 安全漏洞
MIRACASE MHUB500 USB splitters is a software application. This tool provides powerful functionality for audio output devices, allowing a remote attacker to retrieve code signaling sensors via oscilloscope and electro-optical from LEDs of connected devices. A security vulnerability in MIRACASE...
JBL Go 2 安全漏洞
The JBL Go 2 is a full-featured portable waterproof Bluetooth speaker from JBL Japan. A security vulnerability exists in the JBL Go 2 version 2021-08-09 and earlier. A remote attacker could recover voice signals from LEDs on the device through binoculars and photoelectric sensors also known as a...
Sony SRS-XB33 安全漏洞
SONY Sony SRS-XB33 is a smart speaker from Sony Japan. A security vulnerability exists in the Sony SRS-XB33 and SRS-XB43, which arises from a problem with the device powering the audio output device under certain usage scenarios. The vulnerability can be exploited by an attacker to recover voice...
Logitech Z120 安全漏洞
The Logitech Z120 is a compact stereo speaker from Logitech Switzerland. A security vulnerability exists in the Logitech Z120 and S120 that stems from a problem with the device powering the audio output device under certain usage scenarios. The vulnerability can be exploited by an attacker to...
TP-Link UE330 USB 安全漏洞
TP-Link UE330 USB is a port USB 3.0 hub. TP-Link UE330 USB has a security vulnerability that could be exploited by remote attackers to recover voice signals from LEDs on the device through binoculars and photoelectric sensors to conduct "firefly" attacks...
Raspberry Pi 3 module B+ 安全漏洞
The Raspberry Pi 3 module B+ is an embedded system development board. A security vulnerability exists in the Raspberry Pi 3 module B+ and 4 B. The vulnerability stems from a problem with the device powering an audio output device under certain usage scenarios. The vulnerability can be exploited b...
Pebble 安全漏洞
Pebble is a customizable watch from the American company Pebble. Pebble suffers from a security vulnerability that stems from the device's ability to power an audio output device under certain specified usage scenarios. The vulnerability can be exploited by an attacker to recover voice signals fr...
ToneWinner desktop speakers安全漏洞
ToneWinner desktop speakers Winner desktop speakers is a desktop speaker from the Chinese company ToneWinner. A security vulnerability exists in ToneWinner desktop speakers that can be exploited by a remote attacker to recover the voice signal from the power indicator LED via a telescope and a...
