Design/Logic Flaw

Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine. Arrays can be keyed by a signed integer, while they are defined for unsigned integers only. The typechecker doesn't throw when spotting the usage of an int as an index for an array. The typechecker allows the usage of...

Google Chrome < 121.0.6167.160 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 121.0.6167.160. It is, therefore, affected by multiple vulnerabilities as referenced in the 202402stable-channel-update-for-desktop advisory. - Use after free in Mojo in Google Chrome prior to 121.0.6167.160 allowed a...

s-capetravel.eu Cross Site Scripting vulnerability OBB-3846946

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

s-prize-sakura.jp Improper Access Control vulnerability OBB-3845564

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

s-fld.jp Improper Access Control vulnerability OBB-3845529

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

c-s-investment.li Improper Access Control vulnerability OBB-3845237

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

shinmei-s.co.jp Improper Access Control vulnerability OBB-3844169

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

s-graphi.co.jp Improper Access Control vulnerability OBB-3844161

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

s-daniele.it Improper Access Control vulnerability OBB-3844136

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2024-13309 · S-Lang +1 · S-Lang +1

Name of the Vulnerable Software and Affected Versions: S-Lang version 2.3.2 Description: The issue is related to an arithmetic exception in S-Lang via the tt sprintf function. Recommendations: For S-Lang version 2.3.2, consider disabling the tt sprintf function until a patch is available. At the...

RHEL 8 : thunderbird (RHSA-2024:0004)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:0004 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 115.6.0. Security Fixes: Mozilla:...

CVE-2024-0778

UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as critical, has been found in Uniview ISC 2500-S up to 20210930. Affected by this issue is the function setNatConfig of the file /Interface/DevManage/VM.php. The manipulation of the argument natAddress/natPort/natServerPort leads to...

Command injection

UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as critical, has been found in Uniview ISC 2500-S up to 20210930. Affected by this issue is the function setNatConfig of the file /Interface/DevManage/VM.php. The manipulation of the argument natAddress/natPort/natServerPort leads to...

CVE-2024-0778 Uniview ISC 2500-S VM.php setNatConfig os command injection

UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as critical, has been found in Uniview ISC 2500-S up to 20210930. Affected by this issue is the function setNatConfig of the file /Interface/DevManage/VM.php. The manipulation of the argument natAddress/natPort/natServerPort leads to...

CVE-2024-0778 Uniview ISC 2500-S VM.php setNatConfig os command injection

UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as critical, has been found in Uniview ISC 2500-S up to 20210930. Affected by this issue is the function setNatConfig of the file /Interface/DevManage/VM.php. The manipulation of the argument natAddress/natPort/natServerPort leads to...

CVE-2024-0778

CVE-2024-0778 affects Uniview ISC 2500-S (up to 20210930) via the function setNatConfig in /Interface/DevManage/VM.php. Manipulating the arguments natAddress, natPort, or natServerPort results in OS command injection. The vulnerability has been publicly disclosed and is being observed in the wild...

PT-2024-1260 · Uniview · Uniview Isc 2500-S

Name of the Vulnerable Software and Affected Versions: Uniview ISC 2500-S versions up to 20210930 Description: A critical vulnerability has been found in the Uniview ISC 2500-S, affecting the function setNatConfig of the file /Interface/DevManage/VM.php. The manipulation of the arguments...

uniview ISC2500-S security vulnerability

The uniview ISC2500-S is a network device from China Uniview Technology uniview. A network DVR. A security vulnerability exists in the Uniview ISC 2500-S, which originates from a security issue in the setNatConfig function in /Interface/DevManage/VM.php, which leads to operating system command...

CVE-2024-0778: Improper Neutralization of Special Elements used in an OS Command

UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as critical, has been found in Uniview ISC 2500-S up to 20210930. Affected by this issue is the function setNatConfig of the file /Interface/DevManage/VM.php. The manipulation of the argument natAddress/natPort/natServerPort leads to...

EulerOS Virtualization 2.9.0 : curl (EulerOS-SA-2023-2979)

According to the versions of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An improper certificate validation vulnerability exists in curl v8.1.0 in the way it supports matching of wildcard patterns when...