[SECURITY] Fedora 34 Update: slurm-20.11.7-1.fc34

Slurm is an open source, fault-tolerant, and highly scalable cluster management and job scheduling system for Linux clusters. Components include machine status, partition management, job management, scheduling and accounting modules...

Wrong TimeLockERC20 event emitted

Handle cmichel Vulnerability details Vulnerability Details The Visor.timeLockERC721 function emits the TimeLockERC20 event but should emit TimeLockERC721 instead. Impact It allows tricking the backend into registering ERC20 token transfers that never happened which could lead to serious issues wh...

The vulnerability of the Inquiries sub-component of the Oracle Subledger Accounting component in the Oracle E-Business Suite allows a perpetrator to gain unauthorized access to the device.

The vulnerability of the Inquiries sub-component of the Oracle Subledger Accounting component in the Oracle E-Business Suite automation system is related to code errors. Exploiting this vulnerability may allow a malicious actor, operating remotely, to gain unauthorized access to the device throug...

The vulnerability of the sub-components “Loan Details” and “Loan Accounting Events” of the Oracle Loans component in the Oracle E-Business Suite, a business automation system, allows a malicious individual to gain unauthorized access to the device.

The vulnerability of the Loan Details and Loan Accounting Events subcomponents of the Oracle Loans component in the Oracle E-Business Suite is related to code errors. Exploitation of this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to the device through HT...

Use safeTransfer/safeTransferFrom consistently instead of transfer/transferFrom

Handle 0xRajeev Vulnerability details Impact It is good to add a require statement that checks the return value of token transfers or to use something like OpenZeppelin’s safeTransfer/safeTransferFrom unless one is sure the given token reverts in case of a failure. Failure to do so will cause...

PT-2024-11114 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the memory control and slab management in the Linux kernel. Specifically, it involves the use of obj cgroup APIs to charge kmem pages. The problem arises when...

Vault Weight accounting is wrong for withdrawals

Handle @cmichelio Vulnerability details Vulnerability Details When depositing two different synths, their weight is added to the same mapMemberweightmember storage variable. When withdrawing the full amount of one synth with processWithdrawsynth, member, basisPoints=10000 the full weight is...

Incorrect liquidity unit calculation in Utils.sol

Handle 0xRajeev Vulnerability details Impact As per code comments, the calcLiquidityUnits function is supposed to calculate: // units = P t B + T b/2 T B slipAdjustment // P part1 + part2 / part3 slipAdjustment While part1, part2 and part3 are calculated correctly, they are combined as: uint unit...

Vader functions can be called before initialization in init() of Vader.sol

Handle 0xRajeev Vulnerability details Impact All the external/public functions of Vader.sol can be called by other contracts even before Vader.sol contract is initialized. This can lead to exceptions, state corruption or incorrect accounting in other contracts, which may require redeployment of...

CVE-2021-2272

Vulnerability in the Oracle Subledger Accounting product of Oracle E-Business Suite component: Inquiries. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Subledger Accounting...

CVE-2021-2272

Vulnerability in the Oracle Subledger Accounting product of Oracle E-Business Suite component: Inquiries. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Subledger Accounting...

Design/Logic Flaw

Vulnerability in the Oracle Subledger Accounting product of Oracle E-Business Suite component: Inquiries. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Subledger Accounting...

CVE-2021-2252

Vulnerability in the Oracle Loans product of Oracle E-Business Suite component: Loan Details, Loan Accounting Events. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Loans...

CVE-2021-2272

Vulnerability in the Oracle Subledger Accounting product of Oracle E-Business Suite component: Inquiries. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Subledger Accounting...

CVE-2021-2272

Vulnerability in the Oracle Subledger Accounting product of Oracle E-Business Suite component: Inquiries. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Subledger Accounting...

CVE-2021-2272

CVE-2021-2272 affects Oracle E-Business Suite Subledger Accounting Inquiries (versions 12.1.1–12.1.3). A low-privilege, network-accessible attacker over HTTP can compromise Subledger Accounting, potentially leading to unauthorized creation, deletion or modification of data, or unauthorized access...

Oracle E-Business Suite 安全漏洞

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Oracle. The software provides customer relationship management, service management, financial management and other functions. A security vulnerability in Oracle Subledger Accounti...

Oracle E-Business Suite 安全漏洞

Oracle E-Business Suite is an extension of the original Application ERP, including ERP Enterprise Resource Planning, HR Human Resource Management, CRM Customer Relationship Management and so on, a collection of management software, is seamlessly integrated with a management suite. Oracle Loans is...

Arbitrary file reading vulnerability in the accounting training platform of Xiamen NetZhong.com Software Co.

Ltd. is a high-tech enterprise specializing in the development, service and sales of teaching software products for teaching accounting. Xiamen NetZhongNET Software Co., Ltd. accounting training teaching platform there is an arbitrary file reading vulnerability, attackers can use the vulnerabilit...

Print Job Accounting 4.4.10 Unquoted Service Path

Exploit Title: Print Job Accounting 4.4.10 - 'OkiJaSvc' Unquoted Service Path Discovery by: Brian Rodriguez Date: 07-03-2021 Vendor Homepage: https://www.oki.com Software Links:...