EulerOS 2.0 SP8 : curl (EulerOS-SA-2021-2457)

According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - curl 7.1.1 to and including 7.75.0 is vulnerable to an 'Exposure of Private Personal Information to an Unauthorized Actor' by leaking credentials ...

CVE-2021-1620

A vulnerability in the Internet Key Exchange Version 2 IKEv2 support for the AutoReconnect feature of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to exhaust the free IP addresses from the assigned local pool. This vulnerability occurs because the cod...

CVE-2021-1620

A vulnerability in the Internet Key Exchange Version 2 IKEv2 support for the AutoReconnect feature of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to exhaust the free IP addresses from the assigned local pool. This vulnerability occurs because the cod...

Oracle Linux 8 : curl (ELSA-2021-3582)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-3582 advisory. - fix bad connection reuse due to flawed path name checks CVE-2021-22924 Tenable has extracted the preceding description block directly from the Oracle...

PT-2021-5608 · Cisco · Cisco Ios Xe +1

Name of the Vulnerable Software and Affected Versions: Cisco IOS Software and Cisco IOS XE Software affected versions not specified Description: A vulnerability in the Internet Key Exchange Version 2 IKEv2 support for the AutoReconnect feature could allow an authenticated, remote attacker to...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none...

CVE-2021-39574

An issue was discovered in swftools through 20200710. A heap-buffer-overflow exists in the function poolread located in pool.c. It allows an attacker to cause code Execution...

CVE-2021-39584

An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function namespacesethash located in pool.c. It allows an attacker to cause Denial of Service...

UBUNTU-CVE-2021-39583

An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function poollookupstring2 located in pool.c. It allows an attacker to cause Denial of Service...

CVE-2021-39583

An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function poollookupstring2 located in pool.c. It allows an attacker to cause Denial of Service...

CVE-2021-39574

An issue was discovered in swftools through 20200710. A heap-buffer-overflow exists in the function poolread located in pool.c. It allows an attacker to cause code Execution...

Swftools 代码问题漏洞

SWFTools is a suite of open source software tools for creating and manipulating SWF files. a null pointer dereference vulnerability exists in the poollookupuint function in SWFTools pool.c. An attacker could exploit this vulnerability to cause a denial of service...

PT-2021-22655

Name of the Vulnerable Software and Affected Versions: swftools versions through 20200710 Description: An issue exists in the function pool lookup string2 located in pool.c, which allows an attacker to cause Denial of Service due to a NULL pointer dereference. Recommendations: For versions throug...

PT-2021-22649

Name of the Vulnerable Software and Affected Versions: swftools versions through 20200710 Description: An issue exists in the function pool read located in pool.c, which allows an attacker to cause code execution due to a heap-buffer-overflow. Recommendations: For versions through 20200710,...

PT-2021-22664

Name of the Vulnerable Software and Affected Versions: swftools versions through 20200710 Description: An issue exists in the function pool lookup uint located in pool.c, which allows an attacker to cause Denial of Service due to a NULL pointer dereference. Recommendations: For versions through...

_addLiquidity will lose user funds due to frontrunning.

Handle tensors Vulnerability details Impact If addLiquidity is ever called with funds at stake anything more than a few thousand dollars it becomes profitable for MEV bots and other frontrunners to frontrun the addLiquidity call by skewing the pool reserves lowering the amount of LP tokens return...

PostAuctionLauncher can be manipulated by a caller other than the owner

Handle tensors Vulnerability details Impact A comment in the code asks whether it is safe to allow anyone to call PostAuctionLauncher, finalize. In the case that an attacker can get even a few wei of the auction token, it is not safe. Suppose an attacker somehow gets a small amount of the auction...

CVE-2021-23032

On version 16.x before 16.1.0, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.4, and all versions of 13.1.x and 12.1.x, when a BIG-IP DNS system is configured with non-default Wide IP and pool settings, undisclosed DNS responses can cause the Traffic Management Microkernel TMM to terminate. Note:...

CVE-2021-23032

On version 16.x before 16.1.0, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.4, and all versions of 13.1.x and 12.1.x, when a BIG-IP DNS system is configured with non-default Wide IP and pool settings, undisclosed DNS responses can cause the Traffic Management Microkernel TMM to terminate. Note:...

CVE-2021-23032

On version 16.x before 16.1.0, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.4, and all versions of 13.1.x and 12.1.x, when a BIG-IP DNS system is configured with non-default Wide IP and pool settings, undisclosed DNS responses can cause the Traffic Management Microkernel TMM to terminate. Note:...