26492 matches found
Several security vulnerabilities of Hewlett Packard Enterprise products
Hewlett Packard Enterprise Nimble Storage Hybrid Flash Arrays are products of Hewlett Packard Enterprise.Hewlett Packard Enterprise Nimble Storage Hybrid Flash Arrays is an adaptive flash array storage product.Hewlett Packard Enterprise Nimble Storage All Flash Arrays is an all-flash array storag...
PT-2022-16215 · Hewlett Packard · Hpe Nimble Storage All Flash Arrays +2
Name of the Vulnerable Software and Affected Versions: HPE Nimble Storage Hybrid Flash Arrays versions prior to 5.0.10.100 HPE Nimble Storage All Flash Arrays versions prior to 5.0.10.100 HPE Nimble Storage Secondary Flash Arrays versions prior to 5.0.10.100 HPE Nimble Storage Hybrid Flash Arrays...
CVE-2022-23705: Undefined Security Weakness
A security vulnerability has been identified in HPE Nimble Storage Hybrid Flash Arrays, HPE Nimble Storage All Flash Arrays, and HPE Nimble Storage Secondary Flash Arrays which could potentially allow the upload, but not execution, of unauthorized update binaries to the array. HPE has made the...
KeepKey firmware: Input validation error vulnerability
KeepKey firmware is an open source KeepKey device firmware from KeepKey USA. A security vulnerability exists in KeepKey versions prior to 7.3.2, which stems from lib/board/supervise.c incorrectly handling the svhandlerflash address range check...
Fund loss or theft by attacker with creating a flash loan and setting SuperVault as receiver so executeOperation() will be get called by lendingPool but with attackers specified params
Lines of code Vulnerability details Impact According to Aave documentation, when requesting flash-loan, it's possible to specify a receiver, so function executeOperation of that receiver will be called by lendingPool. In the SuperVault there is no check to prevent this attack so attacker can use...
Adobe Flash Player Buffer Overflow Information Disclosure
The vulnerabilities of Adobe Flash Player Desktop Runtime, Flash Player for Google Chrome, as well as Adobe Flash Player for Microsoft Edge and Internet Explorer, are related to reading data beyond the buffer in memory. Exploiting these vulnerabilities can allow an attacker to gain unauthorized...
Unlimited reward minting with Function Transfer in StakerVault (updates balances before calling userCheckpoint)
Lines of code Vulnerability details Impact The bug in "StakerVault.transfer" function which is externally callable is that first it is updating the balance of sender and receiver then it calls ILpGaugelpGauge.userCheckpoint for those addresses. Function userCheckpoint use balance of address to...
PT-2022-29328
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.3 Description A memory leak issue exists in the pm8001 chip fw flash update req function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior ...
PT-2022-29669
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.20 Description A memory leak issue exists in the pm8001 chip fw flash update req function. The actual impact and potential for attack have not been confirmed. Recommendations For versions prior to v5.16.20,...
PT-2022-30278
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.111 Description A memory leak issue exists in the pm8001 chip fw flash update req function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prio...
PT-2022-29995
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.34 Description A memory leak issue exists in the pm8001 chip fw flash update req function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior...
CVE-2022-1108
A potential vulnerability due to improper buffer validation in the SMI handler LenovoFlashDeviceInterface in Thinkpad X1 Fold Gen 1 could be exploited by an attacker with local access and elevated privileges to execute arbitrary code...
Typo3 XSS Vulnerabilities
Cross-site Scripting XSS in TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows remote attackers to inject arbitrary web script or HTML via the tcemain flash message...
GHSA-H86G-796F-HHFQ Typo3 XSS Vulnerabilities
Cross-site Scripting XSS in TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows remote attackers to inject arbitrary web script or HTML via the tcemain flash message...
FBI Releases IOCs Associated with BlackCat/ALPHV Ransomware
The Federal Bureau of Investigation FBI has released a Flash report detailing indicators of compromise IOCs associated with attacks involving BlackCat/ALPHV, a Ransomware-as-a-Service that has compromised at least 60 entities worldwide. CISA encourages users and administrators to review the IOCs...
SecureBackDoor Driver Injection
The vulnerability of the SecureBackDoor driver in Lenovo notebook BIOS microprograms lies in the ability to alter the protection zone of the microprogram by editing the NVRAM variable. Exploiting this vulnerability allows a hacker to inject malicious code into the SPI flash memory...
Clever Cryptocurrency Theft
Beanstalk Farms is a decentralized finance project that has a majority stake governance system: basically people have proportional votes based on the amount of currency they own. A clever hacker used a "flash loan" feature of another decentralized finance project to borrow enough of the currency ...
New Lenovo UEFI Firmware Vulnerabilities Affect Millions of Laptops
Three high-impact Unified Extensible Firmware Interface UEFI security vulnerabilities have been discovered impacting various Lenovo consumer laptop models, enabling malicious actors to deploy and execute firmware implants on the affected devices. Tracked as CVE-2021-3970, CVE-2021-3971, and...
PT-2022-2319
Name of the Vulnerable Software and Affected Versions Lenovo Notebook devices affected versions not specified Description A potential issue in the BIOS of some Lenovo Notebook devices could allow an attacker with elevated privileges to modify the firmware protection region by changing an NVRAM...
