Mageia: Security Advisory (MGASA-2021-0279)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Malicious code in lib-bb-html-sanitizer (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 74072bddc9908e0147976fde0680c197ac5b38167bfcdf14afc5f79f23749f72 Malicious packages campaign since 2021 targeting developers, steals source code and secrets...

bb-vantoor.nl Improper Access Control vulnerability OBB-2240459

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2021-39521

An issue was discovered in libredwg through v0.10.1.3751. A NULL pointer dereference exists in the function bitreadBB located in bits.c. It allows an attacker to cause Denial of Service...

Null pointer dereference

An issue was discovered in libredwg through v0.10.1.3751. A NULL pointer dereference exists in the function bitreadBB located in bits.c. It allows an attacker to cause Denial of Service...

PT-2021-22608

Name of the Vulnerable Software and Affected Versions: libredwg versions prior to 0.10.1.3751 Description: An issue exists in the function bit read BB located in bits.c, which allows an attacker to cause Denial of Service due to a NULL pointer dereference. Recommendations: For versions prior to...

libredwg code-related vulnerabilities

LibreDWG is a free C library for reading and writing DWG files. a null pointer dereference vulnerability exists in the bitreadBB function in bits.c in LibreDWG version 0.10.1.3751. An attacker could exploit this vulnerability to cause a denial of service...

CVE-2021-22222

Infinite loop in DVB-S2-BB dissector in Wireshark 3.4.0 to 3.4.5 allows denial of service via packet injection or crafted capture file...

PT-2021-16095

Name of the Vulnerable Software and Affected Versions Bold Page Builder WordPress plugin versions prior to 3.1.6 Description The issue arises from the bt bb get grid AJAX action passing user input into the unserialize function without validation or sanitization, potentially leading to a PHP Objec...

openSUSE: Security Advisory for wireshark (openSUSE-SU-2021:1118-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OPENSUSE-SU-2021:1118-1 Security update for wireshark

This update for wireshark fixes the following issues: Update wireshark to 3.4.6. Including a fix for: - DVB-S2-BB dissector infinite loop bsc1186790. This update was imported from the SUSE:SLE-15:Update update project...

PT-2021-27356

Name of the Vulnerable Software and Affected Versions: wireshark versions prior to 3.4.6 Description: The issue is related to an infinite loop in the DVB-S2-BB dissector. Recommendations: For versions prior to 3.4.6, update to version 3.4.6 to resolve the issue...

Security update for wireshark (moderate)

openSUSE Security Update: Security update for wireshark Announcement ID: openSUSE-SU-2021:1118-1 Rating: moderate References: 1186790 Affected Products: openSUSE Leap 15.2 An update that contains security fixes can now be installed. Description: This update for wireshark fixes the following issue...

CVE-2021-20783

Cross-site request forgery CSRF vulnerability in Optical BB unit E-WMTA2.3 allows a remote attacker to hijack the authentication of administrators via a specially crafted page...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Optical BB unit E-WMTA2.3 allows a remote attacker to hijack the authentication of administrators via a specially crafted page...

CVE-2021-20783

Cross-site request forgery CSRF vulnerability in Optical BB unit E-WMTA2.3 allows a remote attacker to hijack the authentication of administrators via a specially crafted page...

CVE-2021-20783

The CVE-2021-20783 entry concerns a CSRF vulnerability in the Optical BB unit E-WMTA2.3, allowing a remote attacker to hijack administrator sessions through a specially crafted page. Affected component: Optical BB unit E-WMTA2.3. Root cause stated: cross-site request forgery vulnerability; exploi...

PT-2021-14238

Name of the Vulnerable Software and Affected Versions: Optical BB unit E-WMTA2.3 Description: A cross-site request forgery CSRF issue allows a remote attacker to hijack the authentication of administrators via a specially crafted page. This can lead to unauthorized access to administrative...

CVE-2021-20783: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Optical BB unit E-WMTA2.3 allows a remote attacker to hijack the authentication of administrators via a specially crafted page...

openSUSE: Security Advisory for wireshark (openSUSE-SU-2021:2457-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...