limits are not correctly enforced in withdrawHook contract

Lines of code Vulnerability details Impact withdrawHook contract checks that inside a specified length of time only certain amount of withdrawal are possible per user and globally. But on every period reset the allowed withdraw limit check is missing. And a user can withdraw more that is allowed...

Insufficient Policy Enforcement

chromium is vulnerable to insufficient policy enforcement. The vulnerability exists due to lack of validate in frame restrictions which allows an attacker to bypass fenced via a crafted HTML page...

Insufficient Policy Enforcement

chromium is vulnerable to insufficient policy enforcement. The vulnerability exists due to insufficient policy enforcement in popup blocker, which allows a remote attacker to bypass navigation restrictions via a crafted HTML page...

Insufficient Policy Enforcement

chromium is vulnerable to insufficient policy enforcement. The vulnerability exists due to insufficient policy enforcement in autofills, which allows a remote attacker to bypass navigation restrictions via a crafted HTML page...

Insufficient Policy Enforcement

chromium is vulnerable to insufficient policy enforcement. The vulnerability exists due to insufficient policy enforcement in devtools, which allows a remote attacker to bypass navigation restrictions via a crafted HTML page...

Insufficient Policy Enforcement

chromium is vulnerable to insufficient policy enforcement.The vulnerability exists due to Insufficient policy enforcement in devtools, which allows a remote attacker to bypass navigation restrictions via a crafted HTML page...

Insufficient Policy Enforcement

chromium is vulnerable to insufficient policy enforcement. The vulnerability exists because of improper data validation in directories, which allows attackers to bypass file system restrictions via a crafted HTML page...

Insufficient Policy Enforcement

chromium is vulnerable to insufficient policy enforcement. The vulnerability exists because of the file system api in google chrome which allows attackers to bypass file system restrictions via a crafted HTML page...

Insufficient Policy Enforcement

chromium is using Insufficient policy enforcement. The vulnerability exists due to the insufficient policy enforcement in the library, allowing an attacker to bypass the safe browsing warnings via a malicious file...

GSD-2022-1007991 netfilter: ipset: enforce documented limit to prevent allocating huge memory

netfilter: ipset: enforce documented limit to prevent allocating huge memory This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.78 by commit...

GSD-2022-1007879 macvlan: enforce a consistent minimal mtu

macvlan: enforce a consistent minimal mtu This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.80 by commit...

PT-2022-36469 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.267 Description: The issue concerns the macvlan component, where a consistent minimal MTU is not enforced. This is an automated ID intended to aid in discovery of potential security vulnerabilities, and th...

The Dangerous Digital Creep of Britain's ‘Hostile Environment’

The UK's use of technology to enforce its hard-line immigration policy brings the border into every facet of migrants' lives...

Capsule vulnerable to privilege escalation by ServiceAccount deployed in a Tenant Namespace

Capsule implements a multi-tenant and policy-based environment in a Kubernetes cluster. A ServiceAccount deployed in a Tenant Namespace, when granted with PATCH capabilities on its own Namespace, is able to edit it and remove the Owner Reference, breaking the reconciliation of the Capsule Operato...

GHSA-X45C-CVP8-Q4FM Capsule vulnerable to privilege escalation by ServiceAccount deployed in a Tenant Namespace

Capsule implements a multi-tenant and policy-based environment in a Kubernetes cluster. A ServiceAccount deployed in a Tenant Namespace, when granted with PATCH capabilities on its own Namespace, is able to edit it and remove the Owner Reference, breaking the reconciliation of the Capsule Operato...

Chromium: CVE-2022-4184 Insufficient policy enforcement in Autofill

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2022-4193 Insufficient policy enforcement in File System API

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2022-4187 Insufficient policy enforcement in DevTools

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2022-4195 Insufficient policy enforcement in Safe Browsing

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2022-4183 Insufficient policy enforcement in Popup Blocker

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...