CVE-2021-3663

firefly-iii is vulnerable to Improper Restriction of Excessive Authentication Attempts...

firefly-iii 安全漏洞

firefly-iii is a free and open source personal finance manager. firefly-iii suffers from a security vulnerability that stems from the program being susceptible to undue restrictions on excessive authentication attempts. No detailed vulnerability details are currently available...

CVE-2021-3663: Improper Restriction of Excessive Authentication Attempts

firefly-iii is vulnerable to Improper Restriction of Excessive Authentication Attempts...

Denial Of Service (DoS)

systemd is vulnerable to denial of service. An attacker is able to crash the application using an excessive size value involving strdupa and alloca for a pathname...

None in firefly-iii/firefly-iii

Improper Restriction of Excessive Authentication Attempts. The software does not implement sufficient measures to prevent multiple failed authentication attempts within in a short time frame, making it more susceptible to brute force attacks. STEPS FOR REPRODUCTION: 1Go to...

Router.removeLiquiditySingle(uint256,bool,address) has unchecked transfers

Handle heiho1 Vulnerability details Impact Router.removeLiquiditySingleuint256,bool,address on lines 121, 126, 129 ignores the boolean return on transfers. This is a brittle implementation because it relies on the boolean return value being hard-coded to true. Tokens may return false instead of...

Router.removeLiquidityExact(uint256,address) has unchecked transfers

Handle heiho1 Vulnerability details Impact Router.removeLiquidityExactuint256,address line 114 does not check the boolean return of a token transfer. This is a brittle implementation because it relies on the boolean return value being hard-coded to true. Tokens may not revert in case of failure a...

SUSE SLED15: libsystemd0 / libsystemd0-32bit / libudev-devel / libudev1 / etc (SUSE-SU-2021:2404-1)

The remote SUSE Linux SLED15 / SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:2404-1 advisory. - CVE-2021-33910: Fixed a denial of service in systemd via unitnamepathescape bsc1188063 - Skip udev rules if 'elevator=' is used bsc1184994...

Oracle Linux 8 : systemd (ELSA-2021-2717)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-2717 advisory. 239-45.0.2 - Disable unprivileged BPF by default Orabug: 32870980 - backport upstream pstore tmpfiles patch Orabug: 31420486 - udev rules: fix memory hot add an...

openSUSE 15 Security Update : systemd (openSUSE-SU-2021:2404-1)

The remote SUSE Linux SUSE15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE-SU-2021:2404-1 advisory. - basic/unit-name.c in systemd 220 through 248 has a Memory Allocation with an Excessive Size Value involving strdupa and alloca for a pathname...

CVE-2021-33910

basic/unit-name.c in systemd prior to 246.15, 247.8, 248.5, and 249.1 has a Memory Allocation with an Excessive Size Value involving strdupa and alloca for a pathname controlled by a local attacker that results in an operating system crash...

Code injection

basic/unit-name.c in systemd prior to 246.15, 247.8, 248.5, and 249.1 has a Memory Allocation with an Excessive Size Value involving strdupa and alloca for a pathname controlled by a local attacker that results in an operating system crash...

CVE-2021-33910

CVE-2021-33910 affects systemd prior to versions 246.15, 247.8, 248.5, and 249.1. The root cause is a Memory Allocation with an Excessive Size Value in basic/unit-name.c involving strdupa and alloca for a pathname controlled by a local attacker, leading to a crash of the operating system (denial ...

CVE-2021-33910

basic/unit-name.c in systemd prior to 246.15, 247.8, 248.5, and 249.1 has a Memory Allocation with an Excessive Size Value involving strdupa and alloca for a pathname controlled by a local attacker that results in an operating system crash...

Regular expression denial of service in react-native

A regular expression denial of service ReDoS vulnerability in the validateBaseUrl function can cause the application to use excessive resources, become unresponsive, or crash. This was introduced in react-native version 0.59.0 and fixed in version 0.64.1...

CVE-2021-33910

basic/unit-name.c in systemd prior to 246.15, 247.8, 248.5, and 249.1 has a Memory Allocation with an Excessive Size Value involving strdupa and alloca for a pathname controlled by a local attacker that results in an operating system crash...

CVE-2021-33910: Allocation of Resources Without Limits or Throttling

basic/unit-name.c in systemd prior to 246.15, 247.8, 248.5, and 249.1 has a Memory Allocation with an Excessive Size Value involving strdupa and alloca for a pathname controlled by a local attacker that results in an operating system crash...

EulerOS 2.0 SP5 : binutils (EulerOS-SA-2021-2212)

According to the version of the binutils packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - There's a flaw in the BFD library of binutils in versions before 2.36. An attacker who supplies a crafted file to an application linked with BFD,...

Input validation

A ReDoS regular expression denial of service flaw was found in the Segment is-email package before 1.0.1 for Node.js. An attacker that is able to provide crafted input to the isEmailinput function may cause an application to consume an excessive amount of CPU...

PT-2021-21320

Name of the Vulnerable Software and Affected Versions Segment is-email package versions prior to 1.0.1 Description A ReDoS regular expression denial of service flaw was found in the Segment is-email package for Node.js. An attacker able to provide crafted input to the isEmailinput function may...