Category Archives: Advisories

Modsecurity owasp-modsecurity-crs 3.2.0 (Paranoia level at PL1) has a SQL injection bypass vulnerability. Attackers can use the comment characters and variable assignments in the SQL syntax to bypass Modsecurity WAF protection and implement SQL injection attacks on Web applications.

Advisories

CVE-2021-27693

September 2, 2022

Read Time:7 Second

Server-side Request Forgery (SSRF) vulnerability in PublicCMS before 4.0.202011.b via /publiccms/admin/ueditor when the action is catchimage.

Advisories

protobuf-c-1.4.1-2.fc36

September 2, 2022

Read Time:7 Second

FEDORA-2022-3be472fe11

Packages in this update:

protobuf-c-1.4.1-2.fc36

Update description:

Updated to version 1.4.1.

Advisories

CVE-2021-35097

September 2, 2022

Read Time:12 Second

Possible authentication bypass due to improper order of signature verification and hashing in the signature verification call in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Advisories

CVE-2021-35108

September 2, 2022

Read Time:9 Second

Improper checking of AP-S lock bit while verifying the secure resource group permissions can lead to non secure read and write access in Snapdragon Connectivity, Snapdragon Mobile

Advisories

CVE-2021-35109

September 2, 2022

Read Time:8 Second

Possible address manipulation from APP-NS while APP-S is configuring an RG where it tries to merge the address ranges in Snapdragon Connectivity, Snapdragon Mobile

Advisories

CVE-2021-35113

September 2, 2022

Read Time:10 Second

Possible authentication bypass due to improper order of signature verification and hashing in the signature verification call in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Advisories