CVE-2021-45449: Insertion of Sensitive Information into Log File

Docker Desktop version 4.3.0 and 4.3.1 has a bug that may log sensitive information access token or password on the user's machine during login. This only affects users if they are on Docker Desktop 4.3.0, 4.3.1 and the user has logged in while on 4.3.0, 4.3.1. Gaining access to this data would...

GitLab: Arbitrary file read via the bulk imports UploadsPipeline

Summary The bulk imports api does not remove symlinks when untaring the uploads.tar.gz file, allowing arbitrary files to be read and uploaded when importing a group. When a group has uploads such as markdown attachments, an uploads.tar.gz file will be downloaded and extracted in the...

CVE-2021-22568

When using the dart pub publish command to publish a package to a third-party package server, the request would be authenticated with an oauth2 accesstoken that is valid for publishing on pub.dev. Using these obtained credentials, an attacker can impersonate the user on pub.dev. We recommend...

PT-2021-15145

Name of the Vulnerable Software and Affected Versions Dart SDK versions prior to 2.15.0 Description The issue arises when using the dart pub publish command to publish a package to a third-party package server. The request is authenticated with an oauth2 access token that is valid for publishing ...

CVE-2021-20835

Improper authorization in handler for custom URL scheme vulnerability in Android App 'Mercari Merpay - Marketplace and Mobile Payments App' Japan version versions prior to 4.49.1 allows a remote attacker to lead a user to access an arbitrary website and the website launches an arbitrary Activity ...

Authorization

Improper authorization in handler for custom URL scheme vulnerability in Android App 'Mercari Merpay - Marketplace and Mobile Payments App' Japan version versions prior to 4.49.1 allows a remote attacker to lead a user to access an arbitrary website and the website launches an arbitrary Activity ...

JetBrains YouTrack has an unspecified vulnerability (CNVD-2021-91664)

JetBrains YouTrack is a browser-based bug tracking and project management software from JetBrains Czech Republic. The software features bug tracking, creating workflows, and monitoring project progress.JetBrains YouTrack Mobile 2021.2 previously had a security vulnerability that stemmed from...

JetBrains YouTrack has an unspecified vulnerability (CNVD-2021-91662)

JetBrains YouTrack is a browser-based bug tracking and project management software from JetBrains Czech Republic. The software features bug tracking, creating workflows, and monitoring project progress.JetBrains YouTrack Mobile 2021.2 previously had a security vulnerability that stemmed from...

CVE-2021-43188

In JetBrains YouTrack Mobile before 2021.2, access token protection on iOS is incomplete...

CVE-2021-43189

In JetBrains YouTrack Mobile before 2021.2, access token protection on Android is incomplete...

CVE-2021-43188

In JetBrains YouTrack Mobile before 2021.2, access token protection on iOS is incomplete...

Design/Logic Flaw

In JetBrains YouTrack Mobile before 2021.2, access token protection on Android is incomplete...

Input validation

In JetBrains YouTrack Mobile before 2021.2, access token protection on iOS is incomplete...

CVE-2021-43189

In JetBrains YouTrack Mobile before 2021.2, access token protection on Android is incomplete...

CVE-2021-43188

CVE-2021-43188 : JetBrains YouTrack Mobile prior to 2021.2 has incomplete protection of access tokens on iOS. The issue is documented in the JetBrains Security Bulletin Q3-2021 under YouTrack Mobile (incomplete access tokens protection on iOS) and resolved in 2021.2. The connected documents do no...

CVE-2021-43188

In JetBrains YouTrack Mobile before 2021.2, access token protection on iOS is incomplete...

CVE-2021-43189

CVE-2021-43189 affects JetBrains YouTrack Mobile. The connected data confirms that before version 2021.2, access token protection on Android was incomplete, enabling potential information exposure. The CVSS v3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) corresponds to a base score of 7.3 (HIGH...

CVE-2021-43188: Undefined Security Weakness

In JetBrains YouTrack Mobile before 2021.2, access token protection on iOS is incomplete...

PT-2021-23770

Name of the Vulnerable Software and Affected Versions JetBrains YouTrack Mobile versions prior to 2021.2 Description The issue concerns incomplete access token protection on iOS. Recommendations For versions prior to 2021.2, update to version 2021.2 or later to resolve the issue...

JetBrains YouTrack 安全漏洞

JetBrains YouTrack is a browser-based bug tracking and project management software from JetBrains Czech Republic. The software features bug tracking, creating workflows, and monitoring project progress.JetBrains YouTrack Mobile 2021.2 previously had a security vulnerability that stemmed from...