4979 matches found
GHSA-77VH-XPMG-72QH vulnerabilities
Vulnerabilities for packages: ctop...
Authentication Bypass by CSRF Weakness
Impact CSRF vulnerability that allows user account takeover. All applications using any version of the frontend component of solidusauthdevise are affected if protectfromforgery method is both: - Executed whether as: - A beforeaction callback the default - A prependbeforeaction option prepend: tr...
CVE-2021-41274
solidusauthdevise provides authentication services for the Solidus webstore framework, using the Devise gem. In affected versions solidusauthdevise is subject to a CSRF vulnerability that allows user account takeover. All applications using any version of the frontend component of solidusauthdevi...
CVE-2021-41274
solidusauthdevise provides authentication services for the Solidus webstore framework, using the Devise gem. In affected versions solidusauthdevise is subject to a CSRF vulnerability that allows user account takeover. All applications using any version of the frontend component of solidusauthdevi...
Cross site request forgery (csrf)
solidusauthdevise provides authentication services for the Solidus webstore framework, using the Devise gem. In affected versions solidusauthdevise is subject to a CSRF vulnerability that allows user account takeover. All applications using any version of the frontend component of solidusauthdevi...
CVE-2021-41274 Authentication Bypass by CSRF Weakness
solidusauthdevise provides authentication services for the Solidus webstore framework, using the Devise gem. In affected versions solidusauthdevise is subject to a CSRF vulnerability that allows user account takeover. All applications using any version of the frontend component of solidusauthdevi...
GHSA-V935-PQMR-G8V9 Unexpected panics in num-bigint
Impact Two scenarios were reported where BigInt and BigUint multiplication may unexpectedly panic. - The internal mac3 function did not expect the possibility of non-empty all-zero inputs, leading to an unwrap panic. - A buffer was allocated with less capacity than needed for an intermediate...
CVE-2021-41168
Summary. Snudown (reddit‑specific fork of Sundown) contains a vulnerability in the reference table hash implementation. The reference hashes use a weak hash function, enabling an attacker to generate many hash collisions, leading to a hash‑collision DoS attack and long retrieval times due to dupl...
0.8.18-p11 (0.8.18-p12), @msvx/component (>=1.0.1, <=1.2.2) +24 more potentially affected by CVE-2021-42227 via kindeditor (4.1.10)
kindeditor NPM version 4.1.10 is affected by a known vulnerability. The following packages have a transitive dependency on kindeditor and may be impacted: - 0.8.18-p11 0.8.18-p12 - @msvx/component =1.0.1, =0.0.1, =0.2.3, =0.1.1, =0.0.1, =0.0.3-p12, =4.1.9, =1.3.50, =1.0.0, =0.0.1, =0.2.49,...
Security update for MozillaFirefox (important)
openSUSE Security Update: Security update for MozillaFirefox Announcement ID: openSUSE-SU-2021:1367-1 Rating: important References: 1188891 1189547 1190269 1190274 1190710 1191332 Cross-References: CVE-2021-29980 CVE-2021-29981 CVE-2021-29982 CVE-2021-29983 CVE-2021-29984 CVE-2021-29985...
GHSA-P86R-GC4R-4MQ3
creationtimestamp| type| source ---|---|--- 2021-10-13 02:25:53+00:00| seen| https://t.me/cibsecurity/30470...
CVE-2021-3323 Integer Underflow in 6LoWPAN IPHC Header Uncompression in Zephyr
Integer Underflow in 6LoWPAN IPHC Header Uncompression in Zephyr. Zephyr versions = =2.4.0 contain Integer Underflow Wrap or Wraparound CWE-191. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-89j6-qpxf-pfpc...
GHSA-QV95-G3GM-X542 vulnerabilities
Vulnerabilities for packages: k3d...
GHSA-289F-7MW3-2QF4
creationtimestamp| type| source ---|---|--- 2021-10-06 00:30:49+00:00| published-proof-of-concept| https://t.me/cibsecurity/30006...
Redis Stack Overflow Vulnerability (GHSA-p486-xggp-782c)
Redis is prone to a heap-based stack overflow vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:redis:redis"; if...
CVE-2021-3581
CVE-2021-3581 affects Zephyr RTOS, specifically versions 2.5.0 and later, due to a Buffer Access with Incorrect Length Value (CWE-805) . The available connected sources indicate the issue exists in Zephyr and cite a GHSA advisory; CVSS vectors from NVD point to a high impact (ISC/availability/con...
CSV injection in Craft CMS
Withdrawn Duplicate of GHSA-h7vq-5qgw-jwwq...
GHSA-3J6G-HXX5-3Q26 vulnerabilities
Vulnerabilities for packages: apache-nifi...
