Lucene search
+L

183 matches found

Cvelist
Cvelist
added 2022/12/28 6:27 a.m.101 views

CVE-2022-46173 Elrond go Processing: fallback search of SCRs when not found in the main cache

Elrond-GO is a go implementation for the Elrond Network protocol. Versions prior to 1.3.50 are subject to a processing issue where nodes are affected when trying to process a cross-shard relayed transaction with a smart contract deploy transaction data. The problem was a bad correlation between t...

7.2CVSS7.2AI score0.00724EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2022/12/28 12:00 a.m.42 views

Elrond go 安全漏洞

Elrond go is an open source go implementation of the Elrond Network protocol by Elrond Network. Elrond go 1.3.50 before the version of a security vulnerability , the vulnerability stems from the existence of a processing problem , in trying to use smart contracts to deploy transaction data...

7.2CVSS6.7AI score0.00724EPSS
SaveExploits0References4
GitLab Advisory Database
GitLab Advisory Database
added 2022/12/28 12:00 a.m.104 views

Incorrect Resource Transfer Between Spheres

Elrond-GO is a go implementation for the Elrond Network protocol. Versions prior to 1.3.50 are subject to a processing issue where nodes are affected when trying to process a cross-shard relayed transaction with a smart contract deploy transaction data. The problem was a bad correlation between t...

7.2CVSS2.2AI score0.00724EPSS
SaveExploits0References5Affected Software1
Positive Technologies
Positive Technologies
added 2022/12/28 12:00 a.m.9 views

PT-2022-27787 · Elrond-Go · Elrond-Go

Name of the Vulnerable Software and Affected Versions: Elrond-GO versions prior to 1.3.50 Description: The issue is a processing problem where nodes are affected when trying to process a cross-shard relayed transaction with a smart contract deploy transaction data. This occurs due to a bad...

7.2CVSS7.1AI score0.00724EPSS
SaveExploits0References10
OSV
OSV
added 2022/12/15 12:20 p.m.11 views

SUSE-SU-2022:4501-1 Security update for ceph

This update for ceph fixes the following issues: ceph was updated to the Pacific release 16.2.9-536-g41a9f9a5573: + bsc1195359, bsc1200553 rgw: check bucket shard init status in RGWRadosBILogTrimCR + bsc1194131 ceph-volume: honour osddmcryptkeysize option CVE-2021-3979 + bsc1200064, Remove last...

6.5CVSS6.5AI score0.00556EPSS
SaveExploits0References12
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:17 p.m.4 views

Malicious code in bfx-facs-util-shard (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7011926ac3cc6b680a517ae1da445fdffc0fa0b6990bfd0b10af2c870ea359d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2021/11/24 10:18 p.m.23 views

CVE-2021-32037

An assertion flaw was found in the mongodb server where an aggregation request could trigger an invariant. An authorized user could exploit this flaw by sending a relevant aggregation request to a shard, which could result in a denial of service or server exit. Requests are usually sent via mongo...

6.5CVSS6AI score0.01181EPSS
SaveExploits0References4
OSV
OSV
added 2021/11/24 4:15 p.m.21 views

UBUNTU-CVE-2021-32037

An authorized user may trigger an invariant which may result in denial of service or server exit if a relevant aggregation request is sent to a shard. Usually, the requests are sent via mongos and special privileges are required in order to know the address of the shards and to log in to the shar...

6.5CVSS5.8AI score0.01181EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2021/11/24 2:09 p.m.8 views

CVE-2021-32037

An authorized user may trigger an invariant which may result in denial of service or server exit if a relevant aggregation request is sent to a shard. Usually, the requests are sent via mongos and special privileges are required in order to know the address of the shards and to log in to the shar...

6.5CVSS6.6AI score0.01181EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2021/11/24 10:40 a.m.113 views

CVE-2021-32037

MongoDB Server vulnerability CVE-2021-32037 affects MongoDB Server v5.0 versions prior to and including 5.0.2. An authorized user can trigger an invariant by sending a relevant aggregation request to a shard via mongos, with privileges needed to know shard addresses and to log in to shards in an ...

6.5CVSS6.3AI score0.01181EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2021/11/24 10:40 a.m.16 views

CVE-2021-32037 User may trigger invariant when allowed to send commands directly to shards

An authorized user may trigger an invariant which may result in denial of service or server exit if a relevant aggregation request is sent to a shard. Usually, the requests are sent via mongos and special privileges are required in order to know the address of the shards and to log in to the shar...

6.5CVSS6.4AI score0.01181EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2021/11/24 10:40 a.m.52 views

CVE-2021-32037

Removed by vendor...

6.5CVSS6.5AI score0.01181EPSS
SaveExploits0
CNNVD
CNNVD
added 2021/11/24 12:00 a.m.16 views

Mongodb Server 输入验证错误漏洞

MongoDB Server is the United States MongoDB company's set of open source NoSQL database . The database provides collection-oriented storage, dynamic querying, data replication and automatic failover. An input validation error vulnerability exists in Mongodb, which stems from the product's failure...

6.5CVSS6.5AI score0.01181EPSS
SaveExploits0References4
MongoDB
MongoDB
added 2021/11/24 12:00 a.m.39 views

User may trigger invariant when allowed to send commands directly to shards

An authorized user may trigger an invariant which may result in denial of service or server exit if a relevant aggregation request is sent to a shard. Usually, the requests are sent via mongos and special privileges are required in order to know the address of the shards and to log in to the shar...

6.5CVSS6.2AI score0.01181EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2021/11/24 12:00 a.m.6 views

PT-2021-19639 · Mongodb · Mongodb Server +1

Name of the Vulnerable Software and Affected Versions: MongoDB Server versions prior to and including 5.0.2 Description: An authorized user may trigger an invariant which may result in denial of service or server exit if a relevant aggregation request is sent to a shard. Usually, the requests are...

6.5CVSS6.7AI score0.01181EPSS
SaveExploits0References11
RedHat Linux
RedHat Linux
added 2021/06/16 7:26 p.m.70 views

Moderate: Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.2.4 security and bug fix update

Red Hat Advanced Cluster Management for Kubernetes 2.2.4 General Availability release images, which fix several bugs and security issues. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a...

9.1CVSS6.5AI score0.16657EPSS
SaveExploits1References17
NVD
NVD
added 2020/09/25 7:15 p.m.47 views

CVE-2020-15202

In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, the Shard API in TensorFlow expects the last argument to be a function taking two int64 i.e., long long arguments. However, there are several places in TensorFlow where a lambda taking int or int32 arguments is being used. In...

9CVSS0.01287EPSS
SaveExploits1References5
OSV
OSV
added 2020/09/25 7:15 p.m.27 views

CVE-2020-15202

In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, the Shard API in TensorFlow expects the last argument to be a function taking two int64 i.e., long long arguments. However, there are several places in TensorFlow where a lambda taking int or int32 arguments is being used. In...

9CVSS8.9AI score
SaveExploits0References5
PyPA
PyPA
added 2020/09/25 7:15 p.m.9 views

PYSEC-2020-125

In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, the Shard API in TensorFlow expects the last argument to be a function taking two int64 i.e., long long arguments. However, there are several places in TensorFlow where a lambda taking int or int32 arguments is being used. In...

9CVSS6.9AI score0.01287EPSS
SaveExploits1References5Affected Software1
OSV
OSV
added 2020/09/25 7:15 p.m.7 views

PYSEC-2020-125

In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, the Shard API in TensorFlow expects the last argument to be a function taking two int64 i.e., long long arguments. However, there are several places in TensorFlow where a lambda taking int or int32 arguments is being used. In...

9CVSS7.1AI score0.01287EPSS
SaveExploits1References5
Rows per page
Query Builder