619 matches found
PT-2021-21602
Name of the Vulnerable Software and Affected Versions firefly-iii affected versions not specified Description The issue is related to Cross-Site Request Forgery CSRF, which is a type of attack that tricks a user into performing unintended actions on a web application. Recommendations At the momen...
firefly-iii 跨站请求伪造漏洞
firefly-iii is a free and open source personal finance manager. firefly-iii suffers from a cross-site request forgery vulnerability, which can be exploited by attackers to conduct cross-site request forgery attacks...
TP-Link UE330 USB Information Disclosure Vulnerability
TP-Link UE330 USB is a port USB 3.0 hub. TP-Link UE330 USB has a security vulnerability that could be exploited by remote attackers to recover voice signals from LEDs on the device through binoculars and photoelectric sensors to conduct "firefly" attacks...
Logitech Z120 安全漏洞
The Logitech Z120 is a compact stereo speaker from Logitech Switzerland. A security vulnerability exists in the Logitech Z120 and S120 that stems from a problem with the device powering the audio output device under certain usage scenarios. The vulnerability can be exploited by an attacker to...
MIRACASE MHUB500 USB splitters 安全漏洞
MIRACASE MHUB500 USB splitters is a software application. This tool provides powerful functionality for audio output devices, allowing a remote attacker to retrieve code signaling sensors via oscilloscope and electro-optical from LEDs of connected devices. A security vulnerability in MIRACASE...
JBL Go 2 安全漏洞
The JBL Go 2 is a full-featured portable waterproof Bluetooth speaker from JBL Japan. A security vulnerability exists in the JBL Go 2 version 2021-08-09 and earlier. A remote attacker could recover voice signals from LEDs on the device through binoculars and photoelectric sensors also known as a...
Raspberry Pi 3 module B+ 安全漏洞
The Raspberry Pi 3 module B+ is an embedded system development board. A security vulnerability exists in the Raspberry Pi 3 module B+ and 4 B. The vulnerability stems from a problem with the device powering an audio output device under certain usage scenarios. The vulnerability can be exploited b...
Pebble 安全漏洞
Pebble is a customizable watch from the American company Pebble. Pebble suffers from a security vulnerability that stems from the device's ability to power an audio output device under certain specified usage scenarios. The vulnerability can be exploited by an attacker to recover voice signals fr...
Sony SRS-XB33 安全漏洞
SONY Sony SRS-XB33 is a smart speaker from Sony Japan. A security vulnerability exists in the Sony SRS-XB33 and SRS-XB43, which arises from a problem with the device powering the audio output device under certain usage scenarios. The vulnerability can be exploited by an attacker to recover voice...
TP-Link UE330 USB 安全漏洞
TP-Link UE330 USB is a port USB 3.0 hub. TP-Link UE330 USB has a security vulnerability that could be exploited by remote attackers to recover voice signals from LEDs on the device through binoculars and photoelectric sensors to conduct "firefly" attacks...
ToneWinner desktop speakers安全漏洞
ToneWinner desktop speakers Winner desktop speakers is a desktop speaker from the Chinese company ToneWinner. A security vulnerability exists in ToneWinner desktop speakers that can be exploited by a remote attacker to recover the voice signal from the power indicator LED via a telescope and a...
GHSA-56CX-WF47-HX7W No Restriction of Excessive Authentication Attempts in Firefly III
firefly-iii is vulnerable to Improper Lack of Restriction of Excessive Authentication Attempts...
No Restriction of Excessive Authentication Attempts in Firefly III
firefly-iii is vulnerable to Improper Lack of Restriction of Excessive Authentication Attempts...
firefly-iii has unspecified vulnerabilities
firefly-iii is a free and open source personal finance manager. firefly-iii suffers from a security vulnerability that stems from the program being susceptible to undue restrictions on excessive authentication attempts. No detailed vulnerability details are currently available...
Insecure Authentication
firefly-iii has insecure authentication. The vulnerability exists due to Improper Restriction of Excessive Authentication Attempts allowing an attacker to be able to gain access through brute forcing the login with a correct password list...
CVE-2021-3663
firefly-iii is vulnerable to Improper Restriction of Excessive Authentication Attempts...
CVE-2021-3663
firefly-iii is vulnerable to Improper Restriction of Excessive Authentication Attempts...
Input validation
firefly-iii is vulnerable to Improper Restriction of Excessive Authentication Attempts...
