10490 matches found
Reentrancy
Lines of code Vulnerability details Reentrancy in BlurExchange.executeInput,Input contracts/BlurExchange.sol128-175: External calls: - executeFundsTransfersell.order.trader,buy.order.trader,sell.order.paymentToken,sell.order.fees,price contracts/BlurExchange.sol147-153 -...
Requiring Timelock For Setter Functions
Lines of code Vulnerability details Vulnerability Details We noticed that the following owner-privileged setter functions can update important state variables without a time delay. 1. setExecutionDelegate function of the BlurExchange contract L215 - 222 in code snippet 1 2. setPolicyManager...
CVE-2022-2781
In affected versions of Octopus Server it was identified that the same encryption process was used for both encrypting session cookies and variables...
Design/Logic Flaw
In affected versions of Octopus Server it was identified that the same encryption process was used for both encrypting session cookies and variables...
PT-2022-18604 · Unknown · Octopus Server
Name of the Vulnerable Software and Affected Versions: Octopus Server affected versions not specified Description: The issue arises from the use of the same encryption process for both session cookies and variables in affected versions of the software. Recommendations: At the moment, there is no...
CVE-2022-2781
In affected versions of Octopus Server it was identified that the same encryption process was used for both encrypting session cookies and variables...
CVE-2022-2781: Use of a Broken or Risky Cryptographic Algorithm
In affected versions of Octopus Server it was identified that the same encryption process was used for both encrypting session cookies and variables...
Octopus Server encryption vulnerabilities
Octopus Server is an automated deployment platform. Octopus Server has a cryptographic issue vulnerability that stems from the fact that it uses the same encryption process for encrypting session cookies and variables...
U.S. Dept Of Defense: Sensitive Data Exposure at https://█████████
Sensitive data exposure was discovered in an endpoint of a website, which contained AWS S3 credentials, PATH, IP, and PORTs. This could have allowed an attacker to gain access to sensitive information on the AWS account or perform arbitrary modifications on the AWS resources...
Semrush: Exposure of service tokens to webpack bundle
Service tokens were exposed in a webpack bundle during the build process due to environment variables being accidentally included in the webpack configuration file. A review found no evidence the exposed tokens were used by unauthorized parties...
CVE-2022-32786
An issue in the handling of environment variables was addressed with improved validation. This issue is fixed in Security Update 2022-005 Catalina, macOS Big Sur 11.6.8, macOS Monterey 12.5. An app may be able to modify protected parts of the file system...
CVE-2022-26707
An issue in the handling of environment variables was addressed with improved validation. This issue is fixed in macOS Monterey 12.4. A user may be able to view sensitive user information...
CVE-2022-26707
An issue in the handling of environment variables was addressed with improved validation. This issue is fixed in macOS Monterey 12.4. A user may be able to view sensitive user information...
Design/Logic Flaw
An issue in the handling of environment variables was addressed with improved validation. This issue is fixed in macOS Monterey 12.4. A user may be able to view sensitive user information...
CVE-2022-32786
An issue in the handling of environment variables was addressed with improved validation. This issue is fixed in Security Update 2022-005 Catalina, macOS Big Sur 11.6.8, macOS Monterey 12.5. An app may be able to modify protected parts of the file system...
CVE-2022-26707
An issue in the handling of environment variables was addressed with improved validation. This issue is fixed in macOS Monterey 12.4. A user may be able to view sensitive user information...
CVE-2022-26707
An issue in the handling of environment variables was addressed with improved validation. This issue is fixed in macOS Monterey 12.4. A user may be able to view sensitive user information...
CVE-2022-26707
CVE-2022-26707 relates to macOS Monterey 12.4 where the handling of environment variables had insufficient validation. The Red Hat/NVD entries confirm the issue and Apple’s advisory states it is fixed in macOS Monterey 12.4. The vulnerability could allow a user to view sensitive information due t...