PT-2021-20573

Name of the Vulnerable Software and Affected Versions: Phoenix Contact FL MGUARD 1102 and 1105 versions 1.4.0 through 1.5.0 Description: The remote logging functionality is impaired due to the lack of memory release for data structures from syslog-ng when remote logging is active. Recommendations...

CVE-2021-34582: Improper Neutralization of Input During Web Page Generation

In Phoenix Contact FL MGUARD 1102 and 1105 in Versions 1.4.0, 1.4.1 and 1.5.0 a user with high privileges can inject HTML code XSS through web-based management or the REST API with a manipulated certificate file...

CVE-2021-34598: Missing Release of Memory after Effective Lifetime

In Phoenix Contact FL MGUARD 1102 and 1105 in Versions 1.4.0, 1.4.1 and 1.5.0 the remote logging functionality is impaired by the lack of memory release for data structures from syslog-ng when remote logging is active...

PT-2021-20563

Name of the Vulnerable Software and Affected Versions: Phoenix Contact FL MGUARD 1102 versions 1.4.0 through 1.5.0 Phoenix Contact FL MGUARD 1105 versions 1.4.0 through 1.5.0 Description: A user with high privileges can inject HTML code through web-based management or the REST API with a...

PT-2021-30109

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.71 Description A potential issue exists in the Linux Kernel, specifically in the flower component of the network scheduler. The problem is related to the protection of the fl walk function with RCU. Althoug...

PT-2021-30058

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.151 Description A potential issue exists in the Linux Kernel, specifically in the flower component of the network scheduler. The problem is related to the protection of the fl walk function with RCU. Althoug...

PT-2021-26063

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.151 Description A potential issue exists in the Linux Kernel, specifically in the flower component of the network scheduler. The problem is related to the protection of the fl walk function with rcu. The...

PT-2021-26114

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.71 Description A potential issue exists in the Linux Kernel, specifically in the flower scheduler. The problem is related to the fl walk function, which is not properly protected with RCU. This issue was...

PT-2021-30181

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.10 Description A potential issue exists in the Linux Kernel, specifically in the flower scheduler. The problem is related to the fl walk function, which is not properly protected with RCU. This issue was...

PT-2021-26186

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.14.10 Description: A potential issue exists in the Linux Kernel, specifically in the flower component of the network scheduler. The problem is related to the protection of the fl walk function with RCU. The...

PT-2024-11398

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.15.0-rc2+ Description The vulnerability is related to a use-after-free issue in the fl walk function of the Linux kernel's cls flower module. This issue occurs when a filter is deleted concurrently while the fl...

CVE-2021-33982

An insufficient session expiration vulnerability exists in the "Fish | Hunt FL" iOS app version 3.8.0 and earlier, which allows a remote attacker to reuse, spoof, or steal other user and admin sessions...

Session fixation

An insufficient session expiration vulnerability exists in the "Fish | Hunt FL" iOS app version 3.8.0 and earlier, which allows a remote attacker to reuse, spoof, or steal other user and admin sessions...

CVE-2021-33982

An insufficient session expiration vulnerability exists in the "Fish | Hunt FL" iOS app version 3.8.0 and earlier, which allows a remote attacker to reuse, spoof, or steal other user and admin sessions...

CVE-2021-33982

The vulnerability CVE-2021-33982 affects the Fish | Hunt FL iOS app (version 3.8.0 and earlier). It is described as an insufficient session expiration flaw that enables a remote attacker to reuse, spoof, or steal other users’ and admins’ sessions. Connected sources confirm the issue but do not pr...

CVE-2021-33981

CVE-2021-33981 affects the Fish | Hunt FL iOS app (versions 3.8.0 and earlier). The issue is an insecure direct object vulnerability in the hunting/fishing license retrieval function, allowing a remote authenticated attacker to access other users’ personal information and license images. Root cau...

PT-2021-20368

Name of the Vulnerable Software and Affected Versions: Fish | Hunt FL versions 3.8.0 and earlier Description: The issue concerns an insecure, direct object vulnerability in the hunting/fishing license retrieval function. This allows a remote authenticated attacker to retrieve other people's...

CVE-2021-33982: Insufficient Session Expiration

An insufficient session expiration vulnerability exists in the "Fish | Hunt FL" iOS app version 3.8.0 and earlier, which allows a remote attacker to reuse, spoof, or steal other user and admin sessions...

PT-2021-20369

Name of the Vulnerable Software and Affected Versions: Fish | Hunt FL versions 3.8.0 and earlier Description: An insufficient session expiration issue exists, allowing a remote attacker to reuse, spoof, or steal other user and admin sessions. Recommendations: For versions 3.8.0 and earlier, updat...

CVE-2021-33981: Authorization Bypass Through User-Controlled Key

An insecure, direct object vulnerability in hunting/fishing license retrieval function of the "Fish | Hunt FL" iOS app versions 3.8.0 and earlier allows a remote authenticated attacker to retrieve other people's personal information and images of their hunting/fishing licenses...