Hardcoded credentials

Last Yard 22.09.8-1 does not enforce HSTS headers...

Design/Logic Flaw

Last Yard 22.09.8-1 is vulnerable to Cross-origin resource sharing CORS...

PT-2023-15468 · Last Yard · Last Yard

Name of the Vulnerable Software and Affected Versions: Last Yard version 22.09.8-1 Description: The issue concerns Cross-origin resource sharing CORS, which is a security feature that restricts web pages from making requests to a different origin domain, protocol, or port than the one the web pag...

PT-2023-15467 · Last Yard · Last Yard

Name of the Vulnerable Software and Affected Versions: Last Yard version 22.09.8-1 Description: The issue allows the cookie to be stolen via unencrypted traffic. Recommendations: For version 22.09.8-1, consider using encrypted traffic to protect against cookie theft until a patch is available...

CVE-2022-47717

The CVE-2022-47717 entry applies to Last Yard software version 22.09.8-1, which is reported to be vulnerable to a Cross-origin resource sharing (CORS) issue. The vulnerability is described as a CORS misconfiguration that could enable cross-origin access, with a CVSSv3.1 base score of 7.5 (High) a...

CVE-2022-47714

CVE-2022-47714 affects Last Yard version 22.09.8-1 and is caused by the app not enforcing HSTS headers. According to the CVE entry, the vulnerability has a CVSS v3.1 base score of 9.8 (CRITICAL) with network attack vector, no privileges required, and no user interaction, affecting confidentiality...

CVE-2022-47717

Last Yard 22.09.8-1 is vulnerable to Cross-origin resource sharing CORS...

CVE-2022-47714

Last Yard 22.09.8-1 does not enforce HSTS headers...

Last Yard 安全漏洞

Last Yard is a shelf-edge promotional platform from Last Yard Australia. A security vulnerability exists in Last Yard version 22.09.8-1 that stems from its non-mandatory HSTS headers...

CVE-2022-47715

CVE-2022-47715 affects Last Yard 22.09.8-1, where cookies can be stolen over unencrypted traffic. The root cause is lack of encryption exposing cookie confidentiality. Impact is limited to cookie theft; no explicit exploitation details are provided in the primary entry. Remediation guidance in co...

PT-2023-15466 · Last Yard · Last Yard

Name of the Vulnerable Software and Affected Versions: Last Yard version 22.09.8-1 Description: The issue is related to the lack of enforcement of HSTS headers. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue...

Last Yard 安全漏洞

Last Yard is a shelf-edge promotional platform from Last Yard Australia. A security vulnerability exists in Last Yard version 22.09.8-1, which stems from the unencrypted transmission of its cookies making them accessible to attackers...

CVE-2022-47715

In Last Yard 22.09.8-1, the cookie can be stolen via via unencrypted traffic...

Last Yard 安全漏洞

Last Yard is a shelf-edge promotional platform from Last Yard Australia. A security vulnerability exists in Last Yard version 22.09.8-1, which stems from the fact that it allows an attacker to enable cross-resource sharing...

CVE-2022-47715

In Last Yard 22.09.8-1, the cookie can be stolen via via unencrypted traffic...

CVE-2022-47717

Last Yard 22.09.8-1 is vulnerable to Cross-origin resource sharing CORS...

CVE-2022-47714

Last Yard 22.09.8-1 does not enforce HSTS headers...

RUSTSEC-2023-0028 buf_redux is Unmaintained

Last release was over three years ago. The maintainers have been unreachable to respond to any issues that may or may not include security issues. The repository is now archived and there is no security policy in place to contact the maintainers otherwise. The safety-undocumented unsafe in the...

buf_redux is Unmaintained

Last release was over three years ago. The maintainers have been unreachable to respond to any issues that may or may not include security issues. The repository is now archived and there is no security policy in place to contact the maintainers otherwise. The safety-undocumented unsafe in the...

GSD-2023-1000195 udf: Fix extending file within last block

udf: Fix extending file within last block This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.161 by commit...