Mismatch in if statement check for long0, long1 and shortAmount

Lines of code Vulnerability details Impact Detailed description of the impact of this finding. As stated in the comment of the lines referenced below, long0Amount and long1Amount could be zero but the code is wrongly implemented which could lead to unexpected behavior of the code. The 'shortAmoun...

CVE-2023-22795

A flaw was found in the rubygem-actionpack. RubyGem's actionpack gem is vulnerable to a denial of service caused by a regular expression denial of service ReDoS flaw in Action Dispatch related to the If-None-Match header. By sending a specially-crafted HTTP If-None-Match header, a remote attacker...

ReDoS based DoS vulnerability in Action Dispatch

There is a possible regular expression based DoS vulnerability in Action Dispatch related to the If-None-Match header. This vulnerability has been assigned the CVE identifier CVE-2023-22795. Versions Affected: All Not affected: None Fixed Versions: 5.2.8.15 Rails LTS, 6.1.7.1, 7.0.4.1 Impact A...

Regular Expression Denial of Service (ReDoS)

Overview Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS in the ifnonematch header in http/cache.rb. An attacker can cause resource exhaustion with a malicious If-None-Match header if a version of Ruby below 3.2.0 is in use. NOTE: Patches have been...

ReDoS based DoS vulnerability in Action Dispatch

There is a possible regular expression based DoS vulnerability in Action Dispatch related to the If-None-Match header. This vulnerability has been assigned the CVE identifier CVE-2023-22795. Versions Affected: All Not affected: None Fixed Versions: 6.1.7.1, 7.0.4.1 Impact A specially crafted HTTP...

ALPINE-CVE-2006-20001

A carefully crafted If: request header can cause a memory read, or write of a single zero byte, in a pool heap memory location beyond the header value sent. This could cause the process to crash. This issue affects Apache HTTP Server 2.4.54 and earlier...

PT-2023-33762

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.16 Description The issue is related to the SCSI FCoE transport not being detached when the fcoe if init function fails. This problem was introduced in version v2.6.39 and is fixed in Linux Kernel version...

PT-2023-34531

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description A memory leak issue exists in the ieee80211 if add function, which may potentially lead to security vulnerabilities. The actual impact and attack plausibility have not yet been proven...

PT-2023-33823

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.16 Description A memory leak issue exists in the ieee80211 if add function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v6.0.16,...

PT-2023-34173

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.86 Description The issue is related to the scsi: fcoe transport not being deattached when fcoe if init fails. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

CVE-2006-20001: Out-of-bounds Write

A carefully crafted If: request header can cause a memory read, or write of a single zero byte, in a pool heap memory location beyond the header value sent. This could cause the process to crash. This issue affects Apache HTTP Server 2.4.54 and earlier...

ASUS RT-AX82U 授权问题漏洞

The ASUS RT-AX82U is a wireless router from the Chinese company ASUS. The ASUS RT-AX82U 3.0.0.4.38649674-ge182230 suffers from an authentication error vulnerability that stems from improper authentication in the getIFTTTtoken.cgi function. An attacker could use this vulnerability to access the...

CVE-2022-2993 bt: host: Wrong key validation check

There is an error in the condition of the last if-statement in the function smpcheckkeys. It was rejecting current keys if all requirements were unmet...

CVE-2022-2993 bt: host: Wrong key validation check

There is an error in the condition of the last if-statement in the function smpcheckkeys. It was rejecting current keys if all requirements were unmet...

PT-2022-19913 · Zephyrproject +1 · Zephyr

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to an error in the condition of the last if-statement in the function smp check keys. This error caused the function to reject...

PT-2022-34287

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.211 Description A potential refcount leak was discovered in the if usb probe function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-33878

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.61 Description A potential refcount leak issue exists in the if usb probe function. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v3.5 and is fixed...

PT-2022-34511

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.291 Description A potential refcount leak issue was discovered in the if usb probe function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions pri...

PT-2022-34127

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.5 through 5.10.136 Description A potential refcount leak was discovered in the if usb probe function of the libertas wifi driver. The actual impact and attack plausibility have not yet been proven. Recommendations For...

CVE-2022-2625: Improperly Controlled Modification of Dynamically-Determined Object Attributes

A vulnerability was found in PostgreSQL. This attack requires permission to create non-temporary objects in at least one schema, the ability to lure or wait for an administrator to create or update an affected extension in that schema, and the ability to lure or wait for a victim to use the objec...