Denial of Service Vulnerability in Damon's New Cloud Cache Database

Damon New Cloud Cache Database is a self-developed Key-Value database that is deeply compatible with native Redis. A denial of service vulnerability exists in Damon New Cloud Cache Database, which can be exploited by attackers to cause a program crash...

Since the build function in 'Vault721' allows anyone to deploy a new ODProxy for any user without proper checks, it creates a potential exploit.

Lines of code Vulnerability details Impact The ability to freely deploy ODProxy contracts through the Vault721 contract's build function represents a significant security vulnerability. Exploitation of this vulnerability could lead to: Unauthorized Actions: Malicious actors could deploy proxies f...

PT-2023-29916 · Unknown · Era-Compiler-Vyper

Name of the Vulnerable Software and Affected Versions: era-compiler-vyper versions prior to 1.3.10 Description: The issue arises in the EraVM Vyper compiler for zkSync Era, a layer 2 rollup that uses zero-knowledge proofs to scale Ethereum. A bug prevented the initialization of the first immutabl...

M-07 Unmitigated

Lines of code Vulnerability details Mitigation of M-07: Issue NOT fully mitigated with ERROR Mitigated issue M-07: Lack of access control and value validation in the reward flow exposes functions to public access The issue was that anyone can deposit rewards to AfEth, and that if AfEth or...

Maximizing the value of threat modeling

Explore four practices that maximize the value of threat models throughout the entire development lifecycle...

Juniper Networks’ Junos OS Evolved DoS

The vulnerability of the command-line interface CLI of Juniper Networks’ Junos OS Evolved operating system is related to incorrect checking of the return value of methods or functions. Exploiting this vulnerability can allow an attacker to cause a service failure...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in put_weighted_bipred_8_fallback

Detailed Report: https://oss-fuzz.com/testcase?key=6143058888228864 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: putweightedbipred8fallback...

coturn:FuzzStun: Use-of-uninitialized-value in stun_check_message_integrity_by_key_str

Project: https://github.com/coturn/coturn.git Detailed Report: https://oss-fuzz.com/testcase?key=6454671998582784 Project: coturn Fuzzing Engine: libFuzzer Fuzz Target: FuzzStun Job Type: libfuzzermsancoturn Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in transform_4x4_luma_add_16_fallback

Detailed Report: https://oss-fuzz.com/testcase?key=5708690734579712 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: transform4x4lumaadd16fallback...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read when processing ogg vorbis files using the DECODE macro. An attacker can leak internal memory allocation information by crafting a file that triggers an out-of-bounds read when var is negative. Remediation There is no...

Ubuntu 18.04 LTS : WavPack vulnerability (USN-3960-1)

The remote Ubuntu 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3960-1 advisory. It was discovered that WavPack incorrectly handled certain DFF files. An attacker could possibly use this issue to cause a denial of service. Tenable has extracte...

CVE-2023-45663

stbimage is a single file MIT licensed library for processing images. The stbigetn function reads a specified number of bytes from context typically a file into the specified buffer. In case the file stream points to the end, it returns zero. There are two places where its return value is not...

imagemagick:encoder_bmp3_fuzzer: Use-of-uninitialized-value in WriteBMPImage

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=4803831118299136 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderbmp3fuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in put_weighted_pred_16_fallback

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=4875925659189248 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

Important: Red Hat Security Advisory: Red Hat OpenStack Platform 16.1.9 (collectd-libpod-stats, etcd) security update

An update for collectd-libpod-stats and etcd is now available for Red Hat OpenStack Platform 16.1.9 Train. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in void edge_filtering_luma_internal<unsigned short>

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5388111489925120 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

Juniper Junos OS Unchecked Return Value (JSA73149)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA73149 advisory. - An Unchecked Return Value vulnerability in the user interfaces to the Juniper Networks Junos OS and Junos OS Evolved, the CLI, the XML API, the XML Management Protocol, th...

the nonce value is not increasing everytime

Lines of code Vulnerability details Impact the nonce value is not increasing everytime The nonce value is used to create the TypeHashHelper.Transaction struct that's passed to the buildTransactionStructHash function. The actual value of executorNonceexecRequest.accountexecRequest.executor is...

mupdf:pdf_fuzzer: Use-of-uninitialized-value in inflate

Project: git://git.ghostscript.com/mupdf.git Detailed Report: https://oss-fuzz.com/testcase?key=4779110762938368 Project: mupdf Fuzzing Engine: libFuzzer Fuzz Target: pdffuzzer Job Type: libfuzzermsanmupdf Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: infla...

imagemagick:encoder_dng_fuzzer: Use-of-uninitialized-value in LibRaw::kodak_NUMBER_decode

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5501879637114880 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderdngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Cra...