4882 matches found
CVE-2021-41426: Cross-Site Request Forgery (CSRF)
Beeline Smart box 2.0.38 is vulnerable to Cross Site Request Forgery CSRF via mgtenduser.htm...
PT-2021-23295
Name of the Vulnerable Software and Affected Versions Beeline Smart Box version 2.0.38 Description The issue is related to Cross Site Scripting XSS via the choose mac parameter to the "setup.cgi" endpoint. This allows for potential malicious script execution. No information is provided about the...
PT-2021-23294
Name of the Vulnerable Software and Affected Versions Beeline Smart box version 2.0.38 Description The issue is related to Cross Site Request Forgery CSRF via the "mgt end user.htm" page. This means an attacker could potentially trick a user into performing unintended actions on the Beeline Smart...
CVE-2021-41427: Improper Neutralization of Input During Web Page Generation
Beeline Smart Box 2.0.38 is vulnerable to Cross Site Scripting XSS via the choosemac parameter to setup.cgi...
RHEL 8 : firefox (RHSA-2021:4605)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:4605 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...
Beeline Smart Box Cross-site Scripting Vulnerability
Beeline Smart Box is a wireless router from the Russian company Beeline. A security vulnerability exists in Beeline Smart box 2.0.38, which stems from the choosemac parameter of setup.cgi and is susceptible to cross-site scripting XSS attacks...
Beeline Smart Box Cross-site Request Forgery Vulnerability
Beeline Smart Box is a wireless router from the Russian company Beeline. A security vulnerability exists in Beeline Smart box 2.0.38, which stems from mgtenduser.htm being susceptible to cross-site request forgery CSRF attacks...
Connect Box EuroDOCSIS 3.0 Voice Gateway: Operating System Command Injection Vulnerability
The Connect Box EuroDOCSIS 3.0 Voice Gateway is a home voice gateway device. An operating system command injection vulnerability exists in Connect Box EuroDOCSIS 3.0 Voice Gateway that allows an attacker with privileges and network access to execute commands on the device via the ping.cmd compone...
CentOS 8 : thunderbird (CESA-2021:4130)
The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2021:4130 advisory. - Mozilla: iframe sandbox rules did not apply to XSLT stylesheets CVE-2021-38503 - Mozilla: Use-after-free in file picker dialog CVE-2021-38504 -...
RHEL 8 : thunderbird (RHSA-2021:4130)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:4130 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 91.3.0. Security Fixes: Mozilla:...
RHEL 8 : thunderbird (RHSA-2021:4132)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:4132 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 91.3.0. Security Fixes: Mozilla:...
RLSA-2021:4130 Important: thunderbird security update
Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 91.3.0. Security Fixes: Mozilla: Use-after-free in HTTP2 Session object Mozilla: Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3 Mozilla: iframe sandbox rules did not apply to XS...
RHEL 7 : firefox (RHSA-2021:4116)
The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:4116 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...
Mozilla Firefox has an unspecified vulnerability (CNVD-2021-101164)
Mozilla Firefox is an open source web browser from the Mozilla Foundation. Mozilla Firefox is vulnerable due to an unusual sequence of events controlled by an attacker, and alert can therefore display arbitrary albeit unstyled content on top of an uncontrolled page of the attacker's choice...
ALSA-2021:4123 Important: firefox security update
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 91.3.0 ESR. Security Fixes: Mozilla: Use-after-free in HTTP2 Session object Mozilla: Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3...
PT-2021-27884
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type identified as Global-buffer-overflow READ 2. The crash state involves several functions: fr unix time from tm, fr unix...
Chamilo LMS cross-site scripting vulnerabilities
Chamilo LMS is an open source online learning and collaboration system from the Chamilo Association. The system supports the creation of instructional content, distance training, and online question and answer sessions. A security vulnerability exists in Chamilo LMS that stems from the edit box o...
CVE-2021-41872
Skyworth Digital Technology Penguin Aurora Box 41502 has a denial of service vulnerability, which can be exploited by attackers to cause a denial of service...
