PT-2022-29747

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.19 Description The issue is related to the ext4 file system, specifically with the ext4 mb mark bb function when used with flex bg and fast commit. The actual impact and potential for attack have not been...

PT-2022-30324

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.110 Description The issue is related to the ext4 file system, specifically with the ext4 mb mark bb function when used with flex bg and fast commit. The actual impact and potential for attack have not been...

PT-2022-30065

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description A potential issue exists in the ext4 file system, specifically with the ext4 mb mark bb function when used with flex bg and fast commit. The actual impact and attack plausibility have not yet...

PT-2022-29428

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description The issue is related to the ext4 file system, specifically with the ext4 mb mark bb function when used with flex bg and fast commit. The actual impact and attack plausibility have not yet been...

PT-2022-29567

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.13 through v5.17.1 Description The issue concerns the mb optimize scan performance mount option in the ext4 filesystem, which does not work correctly with extents. This problem was introduced in version v5.13 and is...

mb-kazan.ru Improper Access Control vulnerability OBB-2266504

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

MB CONNECT LINE mbCONNECT24和MB CONNECT LINE mymbCONNECT24 安全漏洞

Mb Connect Line MB CONNECT LINE mbCONNECT24 and MB CONNECT LINE mymbCONNECT24 are products of MB CONNECT LINE Mb Connect Line, Germany.MB CONNECT LINE mbCONNECT24 is a set of Remote Service Portal. It supports remote access, data logging and alarms. MB CONNECT LINE mymbCONNECT24 is an in-house...

PT-2021-10244 · Libav · Libav

Name of the Vulnerable Software and Affected Versions: Libav version 12.3 Description: The issue is a heap-based buffer over-read in the vc1 decode p mb intfi function in vc1 block.c, which can be exploited by an attacker to cause a denial-of-service via a crafted file. Recommendations: For Libav...

PT-2021-10243

Name of the Vulnerable Software and Affected Versions: Libav version 12.3 Description: The issue is related to a segmentation fault in the vc1 decode b mb intfr function in vc1 block.c, which can be triggered by an attacker using a crafted file, resulting in a denial-of-service. Recommendations:...

CVE-2021-33527

In MB connect line mbDIALUP versions = 3.9R0.0 a remote attacker can send a specifically crafted HTTP request to the service running with NT AUTHORITY\SYSTEM that will not correctly validate the input. This can lead to an arbitrary code execution with the privileges of the service...

CVE-2021-33526

In MB connect line mbDIALUP versions = 3.9R0.0 a low privileged local attacker can send a command to the service running with NT AUTHORITY\SYSTEM instructing it to execute a malicous OpenVPN configuration resulting in arbitrary code execution with the privileges of the service...

CVE-2021-34575

In MB connect line mymbCONNECT24, mbCONNECT24 in versions = 2.8.0 an unauthenticated user can enumerate valid users by checking what kind of response the server sends...

CVE-2021-34574

In MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2 an authenticated attacker can change the password of his account into a new password that violates the password policy by intercepting and modifying the request that is send to t...

CVE-2021-33526

In MB connect line mbDIALUP versions = 3.9R0.0 a low privileged local attacker can send a command to the service running with NT AUTHORITY\SYSTEM instructing it to execute a malicous OpenVPN configuration resulting in arbitrary code execution with the privileges of the service...

CVE-2021-33527

In MB connect line mbDIALUP versions = 3.9R0.0 a remote attacker can send a specifically crafted HTTP request to the service running with NT AUTHORITY\SYSTEM that will not correctly validate the input. This can lead to an arbitrary code execution with the privileges of the service...

Design/Logic Flaw

In MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2 an authenticated attacker can change the password of his account into a new password that violates the password policy by intercepting and modifying the request that is send to t...

Design/Logic Flaw

In MB connect line mbDIALUP versions = 3.9R0.0 a low privileged local attacker can send a command to the service running with NT AUTHORITY\SYSTEM instructing it to execute a malicous OpenVPN configuration resulting in arbitrary code execution with the privileges of the service...

Design/Logic Flaw

In MB connect line mbDIALUP versions = 3.9R0.0 a remote attacker can send a specifically crafted HTTP request to the service running with NT AUTHORITY\SYSTEM that will not correctly validate the input. This can lead to an arbitrary code execution with the privileges of the service...

Design/Logic Flaw

In MB connect line mymbCONNECT24, mbCONNECT24 in versions = 2.8.0 an unauthenticated user can enumerate valid users by checking what kind of response the server sends...

CVE-2021-34575

CVE-2021-34575 affects MB connect line products MB CONNECT LINE / mbCONNECT24 up to version 2.8.0. Affected component is the mymbCONNECT24/mbCONNECT24 service, where an unauthenticated attacker can enumerate valid users by observing server response differences. The root cause is an information-di...