168 matches found
Design/Logic Flaw
The implementation of backslash parsing in the Dart URI class for versions prior to 2.18 and Flutter versions prior to 3.30 differs from the WhatWG URL standards. Dart uses the RFC 3986 syntax, which creates incompatibilities with the '' characters in URIs, which can lead to auth bypass in webapp...
Intel Information Disclosure
The vulnerability of Intel microprogramming software is related to the disclosure of information through incompatibility. Exploiting this vulnerability can allow an intruder to disclose the protected information...
Upgraded Q -> H from 104 [1656255316696]
Judge has assessed an item in Issue 104 as High risk. The relevant finding follows: L02: Incompatibility with ERC-4626 Line References Description The EIP-4626 specification requires that totalAssets to NOT revert, but the current implementation does so in the underlying methods: int256...
[SECURITY] Fedora 36 Update: python2.7-2.7.18-22.fc36
Python 2 is an old version of the language that is incompatible with the 3.x line of releases. The language is mostly the same, but many details, especial ly how built-in objects like dictionaries and strings work, have changed considerably, and a lot of deprecated features have finally been...
GHSA-7MHC-PRGV-R3Q4 Access of Resource Using Incompatible Type in Hermes
By passing invalid javascript code where await and yield were called upon non-async and non-generator getter/setter functions, Hermes would invoke generator functions and error out on invalid await/yield positions. This could result in segmentation fault as a consequence of type confusion error,...
SUSE-SU-2021:3602-1 Security update for tomcat
This update for tomcat, javapackages-tools fixes the following issue: Security issue fixed: - CVE-2021-30640: Escape parameters in JNDI Realm queries bsc1188279. - CVE-2021-33037: Process T-E header from both HTTP 1.0 and HTTP 1.1. clients bsc1188278. - CVE-2021-41079: Fixed a denial of service...
Redmine SysController MailHandlerController Information Disclosure
The vulnerability of the SysController and MailHandlerController components in the Redmine project and task management web application is related to changes in the time required for string comparison operations. Exploiting this vulnerability could allow a malicious actor to gain access to...
RM: calibre/buster-backports -- ROM; no security support; bpo10s of a newer version are impossible
Dear Backports admins, I am requesting the removal of calibre from buster-backports, because it has no security support and because newer versions of Calibre depend on a newer Qt version that cannot be backported. I delayed this request until Bullseye was released, so that users would have a...
Linux kernel Information Disclosure
The vulnerability of the Linux operating system’s kernel is related to the exposure of information through incompatibility. Exploiting this vulnerability allows an attacker to read a portion of the kernel’s memory...
Linux kernel Information Disclosure
The vulnerability of the Linux operating system’s kernel is related to the exposure of information through incompatibility. Exploiting this vulnerability can allow an attacker to obtain confidential information...
Intel Information Disclosure
The vulnerability of Intel microprogramming software is related to the disclosure of information through incompatibility. Exploiting this vulnerability can allow an attacker to disclose the protected information...
Incompatability with deflationary / fee-on-transfer tokens
Handle cmichel Vulnerability details Vulnerability Details The DInterest.deposit function takes a depositAmount parameter but this parameter is not the actual transferred amount for fee-on-transfer / deflationary or other rebasing tokens. Impact The actual deposited amount might be lower than the...
SUSE: Security Advisory (SUSE-SU-2017:2616-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DSA 4833-2] gst-plugins-bad1.0 regression update
------------------------------------------------------------------------- Debian Security Advisory DSA-4833-2 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 24, 2021 https://www.debian.org/security/faq -...
DSA Signature Information Disclosure
The vulnerability of DSA signatures in Firefox ESR and Firefox web browsers, as well as in the Thunderbird email client, involves the disclosure of information due to incompatibility. Exploiting this vulnerability can allow attackers to gain access to confidential data...
JT2Go and Teamcenter Visualization Access to Resources Incompatibility Vulnerability
JT2Go is a 3D JT viewing tool that allows users to view JT, PDF, Solid Edge, PLM XML with existing JT. VFZ, CGM, TIF data.Teamcenter visualization software enables companies to enhance their Product Lifecycle Management PLM environments by enabling business users to access documents, 2D drawings...
[SECURITY] [DLA 2482-1] debian-security-support security update
Debian LTS Advisory DLA-2482-1 [email protected] https://www.debian.org/lts/security/ Holger Levsen December 04, 2020 https://wiki.debian.org/LTS Package : debian-security-support Version : 1:9+2020.12.04 debian-security-support, the Debian security support coverage checker, has been...
[SECURITY] Fedora 33 Update: python2.7-2.7.18-6.fc33
Python 2 is an old version of the language that is incompatible with the 3.x line of releases. The language is mostly the same, but many details, especi ally how built-in objects like dictionaries and strings work, have changed considerably, and a lot of deprecated features have finally been...
[SECURITY] Fedora 32 Update: python27-2.7.18-2.fc32
Python 2 is an old version of the language that is incompatible with the 3.x line of releases. The language is mostly the same, but many details, especi ally how built-in objects like dictionaries and strings work, have changed considerably, and a lot of deprecated features have finally been...
Citrix Workspace App for Linux – Session failed to launch on CentOS8.x and Fedora 29-31
This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. The session launch using CWA Linux in distributions like Centos 8.x and Fedora 29-31 will fail with...