463 matches found
GHSA-69FV-GW6G-8CCG Potential memory corruption in arrayfire
The attribute repr added to enums to be compatible with C-FFI caused memory corruption on MSVC toolchain. arrayfire crates = version 3.5.0 do not have this issue when used with Rust versions 1.27 or earlier. The issue only started to appear since Rust version 1.28. The issue seems to be interlink...
Xuperchain has an unspecified vulnerability
Xuperchain is an application. It provides a blockchain infrastructure to build compliant blockchain network functions. version 3.6.0 of Xuperchain contains a security vulnerability that could be exploited by an attacker to obtain partial signatures in order to recover the private key of an...
AZL-6614 CVE-2021-36976 affecting package libarchive for versions less than 3.6.0-1
libarchive 3.4.1 through 3.5.1 has a use-after-free in copystring called from douncompressblock and processblock...
Design/Logic Flaw
An issue was discovered in Xuperchain 3.6.0 that allows for attackers to recover any arbitrary users' private key after obtaining the partial signature in multisignature...
CVE-2020-22741
CVE-2020-22741 affects Xuperchain 3.6.0. The vulnerability arises in the multisignature flow where obtaining a partial signature can allow an attacker to recover arbitrary users’ private keys. The connected documents confirm the issue and its impact (private key recovery), but do not provide expl...
Xuperchain 安全漏洞
Xuperchain is an application. It provides a blockchain infrastructure to build compliant blockchain network functions. version 3.6.0 of Xuperchain contains a security vulnerability that could be exploited by an attacker to obtain partial signatures in order to recover the private key of an...
Uncontrolled Resource Consumption in XNIO
A vulnerability was discovered in XNIO where file descriptor leak caused by growing amounts of NIO Selector file handles between garbage collection cycles. It may allow the attacker to cause a denial of service. It affects XNIO versions 3.6.0.Beta1 through 3.8.1.Final...
DEBIAN-CVE-2020-14340
A vulnerability was discovered in XNIO where file descriptor leak caused by growing amounts of NIO Selector file handles between garbage collection cycles. It may allow the attacker to cause a denial of service. It affects XNIO versions 3.6.0.Beta1 through 3.8.1.Final...
F5 NGINX Controller 安全漏洞
F5 NGINX Controller is a centralized monitoring and management platform for NGINX from F5. The platform supports the management of multiple NGINX instances using a visual interface. A security vulnerability exists in F5 NGINX Controller due to incorrect default permissions that allow local users ...
Strapi 授权问题漏洞
Strapi is an open source headless content management system CMS. A security vulnerability exists in Strapi version 3.6.0 and prior versions that allows an attacker who gains valid session access to take over an account by changing the password...
PT-2021-2224 · Silicon · Uc/Tcp-Ip
Name of the Vulnerable Software and Affected Versions: Silicon Labs uC/TCP-IP version 3.6.0 Description: The issue is related to the improper randomness of TCP Initial Sequence Numbers ISNs in the stack protocol used by uC/OS and uC/TCP-IP. This could allow a remote attacker to gain unauthorized...
CVE-2021-3188
phpList 3.6.0 allows CSV injection, related to the email parameter, and /lists/admin/ exports...
Design/Logic Flaw
phpList 3.6.0 allows CSV injection, related to the email parameter, and /lists/admin/ exports...
phpList CSV Injection Vulnerability
phpList is an open source newsletter and email marketing software from phpList UK. A CSV injection vulnerability exists in phpList 3.6.0 related to the email parameter and /lists/admin/ export. No detailed vulnerability details are provided at this time...
GHSA-6G8V-HPGW-H2V7 Prototype pollution in gsap
There is a prototype pollution vulnerability in gsap which affects all versions before 3.6.0...
Prototype pollution in gsap
There is a prototype pollution vulnerability in gsap which affects all versions before 3.6.0...
CVE-2020-28478
This affects the package gsap before 3.6.0...
CVE-2020-28478
This affects the package gsap before 3.6.0...
