SAP NZDT SQL Injection Vulnerability

SAP NZDT is a conversion of SAP S/4HANA 1809 to AWS by SAP Germany. SAP NZDT suffers from a SQL injection vulnerability that originates from an improperly designed or implemented code development process for a network system or product...

Update of kernel, kernel-debug-devel, kernel-devel, kernel-debug, kernel-debug-devel, python-perf, perf, kernel-headers

...

Samsung NPU driver code-related vulnerabilities

Samsung NPU driver is a neural network processor from Samsung South Korea. A security vulnerability exists in Samsung NPU driver, which arises from improper design or implementation during code development of a networked system or product...

Samsung SMR security vulnerabilities

SAMSUNG SMR is a system patch package from the South Korean company Samsung SAMSUNG. The patch program is provided for Samsung cell phone applications. SAMSUNG SMR has a security vulnerability that originates from an improperly designed or implemented code development process for a networked syst...

Samsung SMR security vulnerabilities

SAMSUNG SMR is a system patch package from the South Korean company Samsung SAMSUNG. It provides patches for Samsung mobile applications. A security vulnerability exists in Samsung SMR that originates from an improperly designed or implemented code development process for a networked system or...

Samsung SMR input validation error vulnerability

Samsung SMR is a system patch package from Samsung South Korea. The patch program is provided for Samsung mobile applications. Samsung SMR has a security vulnerability that originates from an improperly designed or implemented code development process for a networked system or product...

Samsung SMR buffer error vulnerability

Samsung SMR is a system patch package from Samsung South Korea. The patch program is provided for Samsung mobile applications. Samsung SMR has a security vulnerability that originates from an improperly designed or implemented code development process for a networked system or product...

Samsung Mobile Device Buffer Error Vulnerability

Samsung Mobile Device is a series of mobile smart devices from Samsung, a South Korean company. A security vulnerability exists in the Samsung Mobile Device, which arises from an improperly designed or implemented network system or product code development process...

Samsung Mobile Device Code Issues and Vulnerabilities

Samsung Mobile Device is a series of mobile smart devices from Samsung, a South Korean company. A security vulnerability exists in Samsung Mobile Device, which arises from an improper design or implementation of a networked system or product code development process...

OwnCloud code issues and vulnerabilities

Owncloud ownCloud is a personal cloud storage solution from the American company ownCloud Owncloud. A code issue vulnerability exists in owncloud that arises from improper design or implementation during code development of a networked system or product...

LINE for iOS security vulnerabilities

Line for IOS is an instant messaging application based on the IOS platform. A security vulnerability exists in LINE for iOS that arises from improper design or implementation during code development of a networked system or product...

OTRS licensing issue vulnerability

A security vulnerability exists in OTRS, a German OTRS application, a service management software, due to a problem in the development and implementation of the lost password feature. A malicious attacker could exploit this vulnerability to be able to perform a valid user login via the "lost...

Palo Alto Networks PAN-OS security vulnerabilities

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks, Inc. for its firewall appliances. Palo Alto Networks PAN-OS has a security vulnerability that arises from improper design or implementation during code development of a network system or product...

Cross-site Request Forgery (CSRF)

Overview bettererrors is a package that provides a better error page for Rails and other Rack apps. Includes source code inspection, a live REPL and local/instance variable inspection for all stack frames. Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF...

Older releases of better_errors open to Cross-Site Request Forgery attack

Impact bettererrors prior to 2.8.0 did not implement CSRF protection for its internal requests. It also did not enforce the correct "Content-Type" header for these requests, which allowed a cross-origin "simple request" to be made without CORS protection. These together left an application with...

GHSA-W3J4-76QW-WWJM Older releases of better_errors open to Cross-Site Request Forgery attack

Impact bettererrors prior to 2.8.0 did not implement CSRF protection for its internal requests. It also did not enforce the correct "Content-Type" header for these requests, which allowed a cross-origin "simple request" to be made without CORS protection. These together left an application with...

CVE-2021-39197

bettererrors is an open source replacement for the standard Rails error page with more information rich error pages. It is also usable outside of Rails in any Rack app as Rack middleware. bettererrors prior to 2.8.0 did not implement CSRF protection for its internal requests. It also did not...

CVE-2021-39197

bettererrors is an open source replacement for the standard Rails error page with more information rich error pages. It is also usable outside of Rails in any Rack app as Rack middleware. bettererrors prior to 2.8.0 did not implement CSRF protection for its internal requests. It also did not...

Cross site request forgery (csrf)

bettererrors is an open source replacement for the standard Rails error page with more information rich error pages. It is also usable outside of Rails in any Rack app as Rack middleware. bettererrors prior to 2.8.0 did not implement CSRF protection for its internal requests. It also did not...

CVE-2021-39197

CVE-2021-39197 affects the Ruby gem better_errors. It describes that versions prior to 2.8.0 did not implement CSRF protection for internal requests and did not enforce the correct Content-Type header, allowing cross-origin (CORS) attacks in applications with better_errors enabled. The issue is l...