GHSA-9H6G-6MXG-VVP4 Timing side channel vulnerability in endpoint request handler in Vaadin 15-19

Non-constant-time comparison of CSRF tokens in endpoint request handler in com.vaadin:flow-server versions 3.0.0 through 5.0.3 Vaadin 15.0.0 through 18.0.6, and com.vaadin:fusion-endpoint version 6.0.0 Vaadin 19.0.0 allows attacker to guess a security token for Fusion endpoints via timing attack....

Timing side channel vulnerability in endpoint request handler in Vaadin 15-19

Non-constant-time comparison of CSRF tokens in endpoint request handler in com.vaadin:flow-server versions 3.0.0 through 5.0.3 Vaadin 15.0.0 through 18.0.6, and com.vaadin:fusion-endpoint version 6.0.0 Vaadin 19.0.0 allows attacker to guess a security token for Fusion endpoints via timing attack....

PT-2021-19285

Name of the Vulnerable Software and Affected Versions com.vaadin:flow-server versions 1.0.0 through 1.0.13 com.vaadin:flow-server versions 1.1.0 prior to 2.0.0 com.vaadin:flow-server versions 2.0.0 through 2.4.6 com.vaadin:flow-server versions 3.0.0 prior to 5.0.0 com.vaadin:flow-server versions...

PT-2021-8844

Name of the Vulnerable Software and Affected Versions com.vaadin:flow-server versions 1.0.0 through 1.0.5 Vaadin versions 10.0.0 through 10.0.7 Vaadin versions 11.0.0 through 11.0.2 Description A missing check in the UIDL request handler allows an attacker to update element property values via a...

PT-2021-19284

Name of the Vulnerable Software and Affected Versions com.vaadin:vaadin-server versions 7.0.0 through 7.7.23 com.vaadin:vaadin-server versions 8.0.0 through 8.12.2 Description The issue is related to a non-constant-time comparison of CSRF tokens in the UIDL request handler. This allows an attacke...

Timing side channel vulnerability in endpoint request handler in Vaadin 15-19

Non-constant-time comparison of CSRF tokens in endpoint request handler in com.vaadin:flow-server versions 3.0.0 through 5.0.3 Vaadin 15.0.0 through 18.0.6, and com.vaadin:fusion-endpoint version 6.0.0 Vaadin 19.0.0 allows attacker to guess a security token for Fusion endpoints via timing attack...

Cross site request forgery (csrf)

Zulip Desktop before 5.0.0 allows attackers to perform recording via the webcam and microphone due to a missing permission request handler...

CVE-2020-10858

Zulip Desktop before 5.0.0 allows attackers to perform recording via the webcam and microphone due to a missing permission request handler...

CVE-2020-10858: Missing Authorization

Zulip Desktop before 5.0.0 allows attackers to perform recording via the webcam and microphone due to a missing permission request handler...

PT-2021-9177

Name of the Vulnerable Software and Affected Versions Zulip Desktop versions prior to 5.0.0 Description The issue allows attackers to perform recording via the webcam and microphone due to a missing permission request handler. Recommendations For versions prior to 5.0.0, update to version 5.0.0 o...

Denial of Service in @commercial/hapi

Affected versions of @commercial/hapi are vulnerable to Denial of Service. The CORS request handler has a vulnerability which will cause the function to throw a system error if the header contains some invalid values. If no unhandled exception handler is available, the application will exist,...

PT-2020-21127

Name of the Vulnerable Software and Affected Versions hapi versions affected versions not specified Description The issue affects the CORS request handler in hapi, which can cause a system error when encountering invalid values in the header. If an unhandled exception handler is not available, th...

PT-2020-21083

Name of the Vulnerable Software and Affected Versions @commercial/hapi versions prior to 16.8.2 @commercial/hapi versions prior to 17.9.2 @commercial/hapi versions prior to 18.4.1 @commercial/hapi versions prior to 19.1.1 Description The issue affects the CORS request handler in @commercial/hapi,...

PT-2020-20946

Name of the Vulnerable Software and Affected Versions @hapi/hapi versions prior to 18.4.1 @hapi/hapi versions prior to 19.1.1 Description The issue affects the CORS request handler, which can throw a system error if the header contains invalid values. If there is no unhandled exception handler,...

CVE-2020-15479

An issue was discovered in PassMark BurnInTest through 9.1, OSForensics through 7.1, and PerformanceTest through 10. The driver's IOCTL request handler attempts to copy the input buffer onto the stack without checking its size and can cause a buffer overflow. This could lead to arbitrary Ring-0...

Buffer overflow

An issue was discovered in PassMark BurnInTest through 9.1, OSForensics through 7.1, and PerformanceTest through 10. The driver's IOCTL request handler attempts to copy the input buffer onto the stack without checking its size and can cause a buffer overflow. This could lead to arbitrary Ring-0...

Command Injection Vulnerability in Multiple NETGEAR Products (CNVD-2020-35517)

NETGEAR WC7500 and others are a wireless LAN controller from NETGEAR. An injection vulnerability exists in the requesthandler.php file in several NETGEAR products. A remote attacker can exploit this vulnerability by sending a specially crafted request to execute arbitrary commands...

CVE-2018-11106

NETGEAR has released fixes for a pre-authentication command injection in requesthandler.php security vulnerability on the following product models: WC7500, running firmware versions prior to 6.5.3.5; WC7520, running firmware versions prior to 2.5.0.46; WC7600v1, running firmware versions prior to...

PT-2020-6268

Name of the Vulnerable Software and Affected Versions Python versions 2.7 through 2.7.17 Python versions 3.5 through 3.5.9 Python versions 3.6 through 3.6.10 Python versions 3.7 through 3.7.6 Python versions 3.8 through 3.8.1 Description The issue is related to an uncontrolled consumption of...

Apache Solr < 7.1.0 Remote Code Execution

Remote code execution occurs in Apache Solr versions 7.1.0 with Apache Lucene 7.1.0 by exploiting XXE in conjunction with use of a Config API add-listener command to reach the RunExecutableListener class. This can be exploited to upload malicious data to the /upload request handler or as Blind XX...