CVE-2021-24847

The importFromRedirection AJAX action of the SEO Redirection Plugin – 301 Redirect Manager WordPress plugin before 8.2, available to any authenticated user, does not properly sanitise the offset parameter before using it in a SQL statement, leading an SQL injection when the redirection plugin is...

PT-2021-23235 · Unknown · Spree Auth Devise

Name of the Vulnerable Software and Affected Versions: spree auth devise versions prior to 4.0.1 spree auth devise versions prior to 4.1.1 spree auth devise versions prior to 4.2.1 spree auth devise versions prior to 4.4.1 Description: The issue is a CSRF vulnerability that allows user account...

PT-2021-23234

Name of the Vulnerable Software and Affected Versions solidus auth devise versions prior to 2.5.4 Description The issue is a CSRF vulnerability that allows user account takeover. It affects applications using any version of the frontend component of solidus auth devise if the protect from forgery...

VaderPoolV2 minting synths & fungibles can be frontrun

Handle cmichel Vulnerability details The VaderPoolV2 mintFungible and mintSynth functions perform an unsafe nativeAsset.safeTransferFromfrom, addressthis, nativeDeposit with a parameter-specified from address. Note that these functions are not called by the Router, they are directly called on the...

PT-2021-24285

Name of the Vulnerable Software and Affected Versions: simple asn1 versions 0.6.0 Description: An issue was discovered in the simple asn1 crate where a panic occurs if UTCTime data, supplied by a remote attacker, has a second character greater than 0x7f. This happens when parsing the old ASN.1...

CVE-2021-43611

Belledonne Belle-sip before 5.0.20 can crash applications such as Linphone via " \ " in the display name of a From header...

CVE-2021-43611

Belledonne Belle-sip before 5.0.20 can crash applications such as Linphone via " \ " in the display name of a From header...

CVE-2021-43611

Belledonne Belle-sip before 5.0.20 can crash applications such as Linphone via " \ " in the display name of a From header...

Design/Logic Flaw

Belledonne Belle-sip before 5.0.20 can crash applications such as Linphone via " \ " in the display name of a From header...

CVE-2021-43610

Belledonne Belle-sip before 5.0.20 can crash applications such as Linphone via an invalid From header request URI without a parameter in an unauthenticated SIP message, a different issue than CVE-2021-33056...

CVE-2021-43610

Belledonne Belle-sip before 5.0.20 can crash applications such as Linphone via an invalid From header request URI without a parameter in an unauthenticated SIP message, a different issue than CVE-2021-33056...

CVE-2021-43611

CVE-2021-43611 affects Belledonne Belle-sip up to version 5.0.20, where an attacker can cause a crash in applications like Linphone by placing a backslash-quote sequence in the From header display name. Root cause: malformed handling of a display-name field in SIP From headers leading to a crash....

CVE-2021-43611

Belledonne Belle-sip before 5.0.20 can crash applications such as Linphone via " \ " in the display name of a From header...

CVE-2021-43611

Belledonne Belle-sip before 5.0.20 can crash applications such as Linphone via " \ " in the display name of a From header...

Belledonne Belle-sip 环境问题漏洞

Belledonne Belle-sip is a library from the French company Belledonne that implements the transport, transaction and conversation layers of SIP RFC 3261. security vulnerabilities exist in versions prior to Belledonne Belle sip 5.0.20, which can be exploited by attackers to crash applications such ...

CVE-2021-43610: Inconsistent Interpretation of HTTP Requests

Belledonne Belle-sip before 5.0.20 can crash applications such as Linphone via an invalid From header request URI without a parameter in an unauthenticated SIP message, a different issue than CVE-2021-33056...

PT-2021-23890

Name of the Vulnerable Software and Affected Versions: Belledonne Belle-sip versions prior to 5.0.20 Description: The issue allows applications such as Linphone to crash when a specific character, , is present in the display name of a From header. Recommendations: For versions prior to 5.0.20,...

CVE-2021-43611: Improper Resource Shutdown or Release

Belledonne Belle-sip before 5.0.20 can crash applications such as Linphone via " \ " in the display name of a From header...

Belledonne Belle-sip 安全漏洞

Belledonne Belle-sip is a library from the French company Belledonne that implements the transport, transaction and dialog layers of SIP RFC 3261. A security vulnerability exists in Belledonne Belle sip versions prior to 5.0.20, which can be exploited by an attacker to crash an application such a...

PT-2021-23889

Name of the Vulnerable Software and Affected Versions: Belle-sip versions prior to 5.0.20 Description: The issue can cause applications such as Linphone to crash when receiving an unauthenticated SIP message with an invalid From header, specifically a request URI without a parameter...