8914 matches found
CVE-2024-37159 Evmos is missing create validator check
Evmos is the Ethereum Virtual Machine EVM Hub on the Cosmos Network. This vulnerability allowed a user to create a validator using vested tokens to deposit the self-bond. This vulnerability is fixed in 18.0.0...
CVE-2023-6696: Missing Authorization
The Popup Builder – Create highly converting, mobile friendly marketing popups. plugin for WordPress is vulnerable to unauthorized access of functionality due to a missing capability check on several functions in all versions up to, and including, 4.3.1. While some functions contain a nonce check...
CVE-2023-6492: Cross-Site Request Forgery (CSRF)
The Simple Sitemap – Create a Responsive HTML Sitemap plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.5.13. This is due to missing or incorrect nonce validation in the 'adminnotices' hook found in class-settings.php. This makes it possible...
kernel: net/mlx5e: fix a potential double-free in fs_any_create_groups
A double-free flaw was found in the Linux kernel ConnectX-4 and Connect-IB cards in the Mellanox driver. This issue could allow a local user to crash the system...
Fedora: Security Advisory for rust-uu_link (FEDORA-2024-40ee18b2e7)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
GHSA-PXV8-QHRH-JC7V evmos allows transferring unvested tokens after delegations
Impact This advisory has been created to address the following vulnerabilities found in the Evmos codebase and affecting vesting accounts. Wrong spendable balance computation The spendable balance is not updated properly when delegating vested tokens. The following example help in describing the...
evmos allows transferring unvested tokens after delegations
Impact This advisory has been created to address the following vulnerabilities found in the Evmos codebase and affecting vesting accounts. Wrong spendable balance computation The spendable balance is not updated properly when delegating vested tokens. The following example help in describing the...
PT-2024-27343
Name of the Vulnerable Software and Affected Versions Evmos versions prior to 18.0.0 Description The issue concerns the Evmos codebase, specifically affecting vesting accounts. It involves three main problems: wrong spendable balance computation, missing precompile checks, and missing create...
PT-2024-40791
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the QUICVariableInt::size function, which is called by...
PT-2024-29745
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a potential deadlock in the create pinctrl function when handling -EPROBE DEFER. In create pinctrl, pinctrl maps mutex is acquired before calling add setting. If...
PT-2024-29157
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the deletion of tainted pointers in the Linux kernel, specifically in the mlx5 lag create port sel table function when flow rule creation fails. Instead of deleti...
PT-2024-30695
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a NULL pointer dereference in the Linux kernel, specifically in the v4l2 async create ancillary links function. This function creates ancillary links for lens and...
PT-2024-29155
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a tainted pointer delete in the case of region creation failure in the ipc devlink create region function. When region creation fails, the delete process for...
freerdp:TestFuzzCoreClient: Heap-buffer-overflow in gcc_read_server_data_blocks
Project: https://github.com/FreeRDP/FreeRDP.git Detailed Report: https://oss-fuzz.com/testcase?key=6200833682243584 Project: freerdp Fuzzing Engine: honggfuzz Fuzz Target: TestFuzzCoreClient Job Type: honggfuzzasanfreerdp Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 2 Crash Address:...
[SECURITY] Fedora 39 Update: rust-uu_mkdir-0.0.23-3.fc39
mkdir uutils create DIRECTORY...
CVE-2024-2506: Improper Neutralization of Input During Web Page Generation
The Popup Builder – Create highly converting, mobile friendly marketing popups. plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the custom JS functionality in all versions up to, and including, 4.2.7 due to insufficient input sanitization and output escaping on user supplied...
PT-2024-9773
Name of the Vulnerable Software and Affected Versions: Linux kernel version 6.9.3 Description: The vulnerability is related to the vmxnet3 component of the Linux kernel. When the vmxnet3 rq create function fails to allocate memory for rq-data ring.base, the subsequent call to vmxnet3 rq destroy a...
yankeespirits.com Cross Site Scripting vulnerability OBB-3931753
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
