## Potential for loops hitting the block gas limit

Lines of code Vulnerability details Proof of Concept A malicious/compromised LineOfCredit arbiter can add a huge amount of collaterals to the Escrow by calling enableCollateral. This method pushes each collateral token to an array that is then iterated over in getCollateralValue. If the array siz...

org.craftercms:studio-arbiter (>=3.1.10E <=3.1.17.4E) potentially affected by CVE-2022-40634 via org.craftercms:crafter-studio (>=3.1.10E <=3.1.17.4E)

org.craftercms:crafter-studio MAVEN version =3.1.10E, =3.1.10E, =3.1.17.4E Source cves: CVE-2022-40634 Source advisory: OSV:GHSA-2JV3-V37P-65W3...

org.craftercms:studio-arbiter (>=3.1.10E <=3.1.17.4E) potentially affected by CVE-2021-23267 via org.craftercms:crafter-studio (>=3.1.10E <=3.1.17.4E)

org.craftercms:crafter-studio MAVEN version =3.1.10E, =3.1.10E, =3.1.17.4E Source cves: CVE-2021-23267 Source advisory: OSV:GHSA-R6FX-55X3-F9X6...

sup.arbitersports.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-692809 Description| Value ---|--- Affected Website:| sup.arbitersports.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| hidden unti...

Network Time Protocol Vulnerabilities (Supplement)

OVERVIEW This advisory supplement is to accompany the NCCIC/ICS-CERT advisory titled ICSA-14-353-01 Network Time Protocol Vulnerabilities that was published December 19, 2014, on the ICS‑CERT web site. Please refer to the original advisory for all the details of the vulnerabilities. The purpose o...

Network Time Protocol Vulnerabilities (Supplement Update A)

OVERVIEW --------- Begin Update A Part 1 of 2 -------- This advisory supplement is to accompany the NCCIC/ICS-CERT advisory titled ICSA-14-353-01C Network Time Protocol Vulnerabilities that was published February 5, 2015, on the ICS‑CERT web site. --------- End Update A Part 1 of 2 ----------...

Vulnerability in Arbiter Systems GPS Clock

The Arbiter 1094B GPS Substation Clock is a high precision GPS timing and power measurement solution. A security vulnerability exists in the Arbiter 1094B GPS Substation Clock that could be exploited by an attacker to spoof GPS satellite broadcasts via specially crafted radio transmissions,...

CVE-2014-9194

Arbiter 1094B GPS Substation Clock allows remote attackers to cause a denial of service disruption via crafted radio transmissions that spoof GPS satellite broadcasts...

Design/Logic Flaw

Arbiter 1094B GPS Substation Clock allows remote attackers to cause a denial of service disruption via crafted radio transmissions that spoof GPS satellite broadcasts...

CVE-2014-9194

The CVE-2014-9194 issue affects Arbiter Systems’ 1094B GPS Substation Clock. The vulnerability is described as Insufficient Verification of Data Authenticity (CWE-345) allowing remote attackers to spoof GPS satellite broadcasts via crafted radio transmissions, leading to clock disruption or servi...

CVE-2014-9194 Arbiter Systems 1094B GPS Clock Insufficient Verification of Data Authenticity

Arbiter 1094B GPS Substation Clock allows remote attackers to cause a denial of service disruption via crafted radio transmissions that spoof GPS satellite broadcasts...

CVE-2012-3012

The Arbiter Power Sentinel 1133A device with firmware before 11Jun2012 Rev 421 allows remote attackers to cause a denial of service Ethernet outage via unspecified Ethernet traffic that fills a buffer, as demonstrated by a port scan...

CVE-2012-3012

Affected product: Arbiter Systems Power Sentinel 1133A. Vulnerability: remote DoS caused by Ethernet traffic filling a buffer, leading to Ethernet outage (as demonstrated by a port scan). Root cause / details: described in multiple sources, with firmware before 11Jun2012 Rev 421 being vulnerable....