CVE-2021-4052

Use after free in web apps in Google Chrome prior to 96.0.4664.93 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension...

CVE-2021-45461

FreePBX, when restapps aka Rest Phone Apps 15.0.19.87, 15.0.19.88, 16.0.18.40, or 16.0.18.41 is installed, allows remote attackers to execute arbitrary code, as exploited in the wild in December 2021. The fixed versions are 15.0.20 and 16.0.19...

CVE-2021-45461

FreePBX, when restapps aka Rest Phone Apps 15.0.19.87, 15.0.19.88, 16.0.18.40, or 16.0.18.41 is installed, allows remote attackers to execute arbitrary code, as exploited in the wild in December 2021. The fixed versions are 15.0.20 and 16.0.19...

Design/Logic Flaw

FreePBX, when restapps aka Rest Phone Apps 15.0.19.87, 15.0.19.88, 16.0.18.40, or 16.0.18.41 is installed, allows remote attackers to execute arbitrary code, as exploited in the wild in December 2021. The fixed versions are 15.0.20 and 16.0.19...

CVE-2021-45461

CVE-2021-45461 affects FreePBX with restapps (aka Rest Phone Apps) versions 15.0.19.87–15.0.19.88 and 16.0.18.40–16.0.18.41. The vulnerability allows remote attackers to execute arbitrary code. It was exploited in the wild in December 2021. The fixed releases are 15.0.20 and 16.0.19. Remediation:...

JVN#66422035: Android Apps developed using Yappli fails to restrict custom URL schemes properly

Yappli provided by Yappli, Inc. is an application development platform. Android Apps that are developed with Yappli provide the function to access a requested URL using Custom URL Scheme. The access to the function is not restricted properly CWE-939 which may be exploited to direct the App to...

VulnCheck KEV: CVE-2021-45461

FreePBX, when restapps aka Rest Phone Apps 15.0.19.87, 15.0.19.88, 16.0.18.40, or 16.0.18.41 is installed, allows remote attackers to execute arbitrary code, as exploited in the wild in December 2021. The fixed versions are 15.0.20 and 16.0.19...

PT-2021-7259

Name of the Vulnerable Software and Affected Versions FreePBX versions 15.0.19.87 through 15.0.19.88 FreePBX versions 16.0.18.40 through 16.0.18.41 Description The issue allows remote attackers to execute arbitrary code. This has been exploited in the wild, with reports of attacks starting in...

Yappli security vulnerabilities

Yappli, an application development platform from Yappli Japan, has a security vulnerability in Yappli Android Apps that could be exploited by attackers to access malicious websites containing carefully constructed URLs, where the application could be directed to connect to certain unintended...

io.atomix:atomix-all (1.0.7), org.onosproject:onos-apps-fwd (>=1.8.5, <=1.8.6) +1 more potentially affected by CVE-2020-35215 via io.atomix:atomix (1.0.7)

io.atomix:atomix MAVEN version 1.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on io.atomix:atomix and may be impacted: - io.atomix:atomix-all 1.0.7 - org.onosproject:onos-apps-fwd =1.8.5, =1.8.5, =1.8.6 Source cves: CVE-2020-35215 Source advisory:...

com.srotya.minuteman:minuteman-core (>=0.0.2, <=0.0.4), com.srotya.minuteman:rocksdb-cluster (>=0.0.2, <=0.0.4) +5 more potentially affected by CVE-2020-35215 via io.atomix:atomix (1.0.5)

io.atomix:atomix MAVEN version 1.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on io.atomix:atomix and may be impacted: - com.srotya.minuteman:minuteman-core =0.0.2, =0.0.2, =0.0.21, =0.0.31, =0.0.32 - io.atomix:atomix-all 1.0.5 -...

com.srotya.minuteman:minuteman-core (>=0.0.2, <=0.0.4), com.srotya.minuteman:rocksdb-cluster (>=0.0.2, <=0.0.4) +5 more potentially affected by CVE-2020-35209 via io.atomix:atomix (1.0.5)

io.atomix:atomix MAVEN version 1.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on io.atomix:atomix and may be impacted: - com.srotya.minuteman:minuteman-core =0.0.2, =0.0.2, =0.0.21, =0.0.31, =0.0.32 - io.atomix:atomix-all 1.0.5 -...

com.srotya.minuteman:minuteman-core (>=0.0.2, <=0.0.4), com.srotya.minuteman:rocksdb-cluster (>=0.0.2, <=0.0.4) +5 more potentially affected by CVE-2020-35214 via io.atomix:atomix (1.0.5)

io.atomix:atomix MAVEN version 1.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on io.atomix:atomix and may be impacted: - com.srotya.minuteman:minuteman-core =0.0.2, =0.0.2, =0.0.21, =0.0.31, =0.0.32 - io.atomix:atomix-all 1.0.5 -...

io.atomix:atomix-all (1.0.7), org.onosproject:onos-apps-fwd (>=1.8.5, <=1.8.6) +1 more potentially affected by CVE-2020-35214 via io.atomix:atomix (1.0.7)

io.atomix:atomix MAVEN version 1.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on io.atomix:atomix and may be impacted: - io.atomix:atomix-all 1.0.7 - org.onosproject:onos-apps-fwd =1.8.5, =1.8.5, =1.8.6 Source cves: CVE-2020-35214 Source advisory:...

io.atomix:atomix-all (1.0.7), org.onosproject:onos-apps-fwd (>=1.8.5, <=1.8.6) +1 more potentially affected by CVE-2020-35210 via io.atomix:atomix (1.0.7)

io.atomix:atomix MAVEN version 1.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on io.atomix:atomix and may be impacted: - io.atomix:atomix-all 1.0.7 - org.onosproject:onos-apps-fwd =1.8.5, =1.8.5, =1.8.6 Source cves: CVE-2020-35210 Source advisory:...

com.srotya.minuteman:minuteman-core (>=0.0.2, <=0.0.4), com.srotya.minuteman:rocksdb-cluster (>=0.0.2, <=0.0.4) +5 more potentially affected by CVE-2020-35210 via io.atomix:atomix (1.0.5)

io.atomix:atomix MAVEN version 1.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on io.atomix:atomix and may be impacted: - com.srotya.minuteman:minuteman-core =0.0.2, =0.0.2, =0.0.21, =0.0.31, =0.0.32 - io.atomix:atomix-all 1.0.5 -...

io.atomix:atomix-all (1.0.7), org.onosproject:onos-apps-fwd (>=1.8.5, <=1.8.6) +1 more potentially affected by CVE-2020-35216 via io.atomix:atomix (1.0.7)

io.atomix:atomix MAVEN version 1.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on io.atomix:atomix and may be impacted: - io.atomix:atomix-all 1.0.7 - org.onosproject:onos-apps-fwd =1.8.5, =1.8.5, =1.8.6 Source cves: CVE-2020-35216 Source advisory:...

com.srotya.minuteman:minuteman-core (>=0.0.2, <=0.0.4), com.srotya.minuteman:rocksdb-cluster (>=0.0.2, <=0.0.4) +5 more potentially affected by CVE-2020-35213 via io.atomix:atomix (1.0.5)

io.atomix:atomix MAVEN version 1.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on io.atomix:atomix and may be impacted: - com.srotya.minuteman:minuteman-core =0.0.2, =0.0.2, =0.0.21, =0.0.31, =0.0.32 - io.atomix:atomix-all 1.0.5 -...

io.atomix:atomix-all (1.0.7), org.onosproject:onos-apps-fwd (>=1.8.5, <=1.8.6) +1 more potentially affected by CVE-2020-35213 via io.atomix:atomix (1.0.7)

io.atomix:atomix MAVEN version 1.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on io.atomix:atomix and may be impacted: - io.atomix:atomix-all 1.0.7 - org.onosproject:onos-apps-fwd =1.8.5, =1.8.5, =1.8.6 Source cves: CVE-2020-35213 Source advisory:...

io.atomix:atomix-all (1.0.7), org.onosproject:onos-apps-fwd (>=1.8.5, <=1.8.6) +1 more potentially affected by CVE-2020-35211 via io.atomix:atomix (1.0.7)

io.atomix:atomix MAVEN version 1.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on io.atomix:atomix and may be impacted: - io.atomix:atomix-all 1.0.7 - org.onosproject:onos-apps-fwd =1.8.5, =1.8.5, =1.8.6 Source cves: CVE-2020-35211 Source advisory:...