CVE-2020-26784

CVE-2020-26784 is referenced in Windows update records as a Denial of Service issue affecting Cluster Shared Volumes (CSV). The connected MSKBs (KB5012596, KB5012599, KB5012604, KB5012647, KB5012670) indicate that the CSV DoS issue is addressed/improved in the April 2022 security updates across m...

CVE-2020-1341

CVE-2020-1341 affects Microsoft Edge (Chromium-based). The issue is an Elevation of Privilege when DLLs are allowed to download without an additional user prompt. Exploitation requires a user to browse to a malicious site and initiate a DLL download, which could lead to elevated privileges on the...

CVE-2022-45844

CVE-2022-45844 is associated with a Broken Access Control vulnerability in the WordPress Organization Chart plugin prior to version 1.4.2. The Patchstack entry specifies that versions ≤ 1.4.1 are affected, with remediation by updating to at least 1.4.2. No exploitation details are provided in the...

CVE-2021-42898

Technical details for CVE-2021-42898 are not publicly available in the provided documents. Monitor for updates as the Initial Description indicates the candidate is reserved.

kernel: ext4: add reserved GDT blocks check

A flaw was found in the ext4 module in the Linux kernel. Resizing a corrupt ext4 image can cause a NULL pointer dereference due to a missing check if the reserved GDT blocks is zero when the resizeinode feature is disabled, resulting in a denial of service...

PT-2022-35618 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.223 Description: A potential issue exists where the hugetlb lock is not taken before decrementing h-resv huge pages. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

CVE-2022-45075

CVE-2022-45075 corresponds to a Broken Access Control vulnerability in the WordPress Activity Reactions For Buddypress plugin, affected versions

kernel: ext4: add reserved GDT blocks check

A flaw was found in the ext4 module in the Linux kernel. Resizing a corrupt ext4 image can cause a NULL pointer dereference due to a missing check if the reserved GDT blocks is zero when the resizeinode feature is disabled, resulting in a denial of service...

CVE-2021-045960

IBM Robotic Process Automation for Cloud Pak 21.0.2 is affected by multiple vulnerabilities tied to Expat/libexpat and related components, including CVE-2021-045960. The bulletin lists Expat-derived CVEs impacting the base container images and the .NET 6 runtime, with various CVSS details. Remedi...

CVE-2022-3772

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-36534. Reason: This candidate is a reservation duplicate of CVE-2020-36534. Notes: All CVE users should reference CVE-2020-36534 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2022-44705

Technical details for CVE-2022-44705 are not publicly available in the provided documents. There is no information on affected products, impact, vectors, or remediation. Monitor for future updates.

A System Reserved partition is visible in a vDisk when it is created using the Imaging Wizard.

Using the Imaging Wizard a new vDisk is created. A drive letter is assigned to the System Reserved partition and it is visible in the new vDisk. It is expected behavior by design. The System Reserved partition should be invisible to users. Before publishing the vDisk to target devices, the drive...

CVE-2022-24476

CVE-2022-24476 affects IBM WebSphere Application Server Liberty (and Open Liberty) within IBM Watson Assistant for IBM Cloud Pak for Data, version ranges 17.0.0.3–22.0.0.7 and Open Liberty with authenticated identity spoofing via a specially crafted request. IBM Clover: vulnerable products includ...

CVE-2021-44823

Technical details for CVE-2021-44823 are not publicly available in the provided documents. Monitor for updates as information may be released later.

CVE-2022-16126

Technical details for CVE-2022-16126 are not publicly available in the provided documents. No affected products, impact, or remediation are specified. Monitor for updates from official sources.

Outstanding reserved tokens are incorrectly counted in total redemption weight

Lines of code Vulnerability details Impact The amounts redeemed in overflow redemption can be calculated incorrectly due to incorrect accounting of the outstanding number of reserved tokens. Proof of Concept Project contributors are allowed to redeem their NFT tokens for a portion of the overflow...

ReserveRate doesn't always work as expected

Lines of code Vulnerability details Impact Reserve NFTs are not available as expected Proof of Concept uint256 numberOfNonReservesMinted = storedTier.initialQuantity - storedTier.remainingQuantity - reserveTokensMinted; uint256 numerator = uint256numberOfNonReservesMinted storedTier.reservedRate;...

Incorrect calculation of totalRedemptionWeight in JBTiered721DelegateStore.sol, we use weight + number of reserved token instead of weight + weight

Lines of code Vulnerability details Impact After NFT minted, the NFT has redemption weight based on the contribution floor price, the logic that calculate the total redemption weight is storedTier = storedTierOfnfti + 1; // Add the tier's contribution floor multiplied by the quantity minted. weig...

CVE-2021-41624

CVE-2021-41624 is associated with a memory-leak DoS in F5 BIG-IP. The CNNVD entry describes F5 BIG-IP as an application delivery platform and notes a memory leak vulnerability that triggers denial of service. The provided documents do not specify affected versions, vulnerable components, exploit ...

CVE-2022-33214

Memory corruption in display due to time-of-check time-of-use of metadata reserved size in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...