GHSA-69CG-P879-7622 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner-fips, dynamic-localpv-provisioner, kubeflow-fips, k3d, wireguard-go, kube-state-metrics, terraform-provider-sendgrid, hey, terraform-provider-sendgrid-fips, grpcurl, kubeflow, kubeflow-katib...

Outbyte PC Repair code issues and vulnerabilities

Outbyte PC Repair is a comprehensive computer repair tool from Outbyte. Designed to solve a range of different system problems, clean up drives, optimize performance and improve your privacy and security. A security vulnerability exists in Outbyte PC Repair Installation File version 1.7.112.7856,...

CVE-2022-28884

A Denial-of-Service vulnerability was discovered in the F-Secure and WithSecure products where aerdl.dll may go into an infinite loop when unpacking PE files. It is possible that this can crash the scanning engine...

CVE-2022-27664 vulnerabilities

Vulnerabilities for packages: hey, k3d, terraform-provider-sendgrid, grpcurl, kubeflow, kubeflow-katib, wireguard-go, dynamic-localpv-provisioner...

CVE-2022-27664 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner-fips, dynamic-localpv-provisioner, kubeflow-fips, k3d, wireguard-go, kube-state-metrics, terraform-provider-sendgrid, hey, terraform-provider-sendgrid-fips, grpcurl, kubeflow, kubeflow-katib...

CVE-2021-43565 vulnerabilities

Vulnerabilities for packages: k3d, kubeflow, dynamic-localpv-provisioner, terraform-provider-sendgrid...

CVE-2021-43565 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner-fips, dynamic-localpv-provisioner, kubeflow-fips, k3d, terraform-provider-sendgrid-fips, kubeflow, terraform-provider-sendgrid...

PT-2022-5016 · Rizin · Rizin

Name of the Vulnerable Software and Affected Versions: Rizin versions 0.4.0 and prior Description: The issue is related to an out-of-bounds write when getting data from dyld cache files. A user opening a malicious dyld cache file could be affected, allowing an attacker to execute code on the user...

Rizin buffer error vulnerability

Rizin is a free open source reverse engineering framework from the Rizin organization. It is used for analyzing binary files, disassembling code, debugging programs, as a forensic tool, as a scriptable command-line hex editor capable of opening disk files, and more. A buffer error vulnerability...

Google Chrome WebUI Code Execution

The vulnerability of the Google Chrome browser’s WebUI interface is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Google Chrome Windows Manager Code Execution

The vulnerability of the Window Manager extension of Google Chrome relates to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

An End-to-End Approach to Next-Gen Security for Web Applications & APIs

According to Verizon’s 2022 Data Breach Investigations Report, web applications remain both the top hacking vector and data breach pattern, accounting for roughly 70% of security incidents. This is because web applications are everywhere and easily probed for weaknesses. A vulnerability in any...

IBM i2 Analyst’s Notebook Buffer Overflow

The vulnerability of the IBM i2 Analyst’s Notebook visual analysis tool arises from an overflow in the buffer of dynamic memory. Exploiting this vulnerability allows a attacker to execute arbitrary code using a specially created file...

Cross-site Scripting (XSS)

getkirby/cms is vulnerable to Cross-site Scripting XSS. The use of the v-html tag in MultiselectInput.vue allows an attacker to inject and execute malicious javascript through the dynamic options in the multi-select field...

Installer of Ricoh Device Software Manager may insecurely load Dynamic Link Libraries

Overview Installer of Device Software Manager provided by RICOH COMPANY, LTD. contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Tomohisa Hasegawa of Canon IT Solutions Inc. reported this vulnerability to IPA. JPCERT/CC coordinated wit...

Ricoh Device Software Manager code-related vulnerabilities

Ricoh Device Software Manager is a device software manager from Ricoh Japan. A security vulnerability exists in Ricoh Device Software Manager, which arises from the possibility that the installer may load unsafe dynamic link libraries...

systemd security update

239-58.0.1.4 - Disable unprivileged BPF by default Orabug: 32870980 - backport upstream pstore tmpfiles patch Orabug: 31420486 - udev rules: fix memory hot add and remove Orabug: 31310273 - fix to enable systemd-pstore.service Orabug: 30951066 - journal: change support URL shown in the catalog...

Dynamic quorum votes parameters for a proposal (Proposal A) are changed according to another proposal (Proposal B) that proposes to update dynamic quorum votes parameters when Proposal B is executed after Proposal A is created in the same block

Lines of code Vulnerability details Impact The following writeQuorumParamsCheckpoint function is used to record dynamic quorum votes parameters at a block of interest. function writeQuorumParamsCheckpointDynamicQuorumParams memory params internal uint32 blockNumber = safe32block.number, 'block...

NounsDAOLogicV2's state() and proposals() will use initial dynamic params for all V1 proposals

Lines of code Vulnerability details state and proposals call quorumVotesid that utilize initial dynamic params for all V1 proposals by misusing 0 as a proposal creation block. I.e. new field is referenced while it is zero for all V1 proposals. This way all V1 proposals will use the same initial s...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow in the invertptdynamic function in plxelf.cpp a crafted Mach-O file. Remediation Upgrade upx to version 4.2.1 or higher. References - GitHub Commit - GitHub Commit - GitHub Issue Credit: giantbranch of NSFOCUS...