1973 matches found
qemu security update
15:4.2.1-11.el7 - pvrdma: Fix the ring init error flow CVE-2021-3608 Marcel Apfelbaum Orabug: 33120142 CVE-2021-3608 - pvrdma: Ensure correct input on ring init CVE-2021-3607 Marcel Apfelbaum Orabug: 33120146 CVE-2021-3607 - hw/rdma: Fix possible mremap overflow in the pvrdma device CVE-2021-3582...
Unused return value from transfer()
Handle JMukesh Vulnerability details Impact It is usually good to add a require-statement that checks the return value or to use something like safeTransfer; unless one is sure the given token reverts in case of a failure. Proof of Concept Tools Used manual review Recommended Mitigation Steps che...
Unused return value from transfer()/transferFrom()
Handle JMukesh Vulnerability details Impact return value from transfer/transferFrom ensure success of the call and if not , it describe the reason for. It is usually good to add a require-statement that checks the return value or to use something like safeTransfer; unless one is sure the given...
unused return value from transferfrom() function
Handle JMukesh Vulnerability details Impact by utilizing the return values we are ensuring that transaction is successfully executed if not it emit reason for failing Proof of Concept Tools Used manual review Recommended Mitigation Steps utilize the return value --- The text was updated...
CVE-2021-29484
Ghost is a Node.js CMS. An unused endpoint added during the development of 4.0.0 has left sites vulnerable to untrusted users gaining access to Ghost Admin. Attackers can gain access by getting logged in users to click a link containing malicious code. Users do not need to enter credentials and m...
CVE-2021-29484
Ghost is a Node.js CMS. An unused endpoint added during the development of 4.0.0 has left sites vulnerable to untrusted users gaining access to Ghost Admin. Attackers can gain access by getting logged in users to click a link containing malicious code. Users do not need to enter credentials and m...
Archives may contain uninitialized memory
rkyv is a serialization framework that writes struct-compatible memory to be stored or transmitted. During serialization, struct padding bytes and unused enum bytes may not be initialized. These bytes may be written to disk or sent over unsecured channels...
CVE-2020-8408
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none...
Open redirect
Rejected reason: Unused CVE for 2020...
Open redirect
Rejected reason: Unused CVE for 2020...
Open redirect
Rejected reason: Unused CVE for 2020...
Open redirect
Rejected reason: Unused CVE for 2020...
Open redirect
Rejected reason: Unused CVE for 2020...
Open redirect
Rejected reason: Unused CVE for 2020...
Open redirect
Rejected reason: Unused CVE for 2020...
Open redirect
Rejected reason: Unused CVE for 2020...
Open redirect
Rejected reason: Unused CVE for 2020...
Open redirect
Rejected reason: Unused CVE for 2020...