14979 matches found
CVE-2023-4314: Undefined Security Weakness
The wpDataTables WordPress plugin before 2.1.66 does not validate the "Serialized PHP array" input data before deserializing the data. This allows admins to deserialize arbitrary data which may lead to remote code execution if a suitable gadget chain is present on the server. This is impactful in...
Malicious caller tcan o pass arrays with more than 1 element to exploit the contract
Lines of code Vulnerability details Impact This can lead to assets being trapped in the contract or transferred improperly. Proof of Concept This expects and enforces that minimumReceived and maximumSpent will only have 1 element each. A malicious caller could call with arrays like: minimumReceiv...
In ratifyOrder there is no need for array
Lines of code Vulnerability details Impact In ratifyOrder there is no need for array for SpentItem and ReceivedItem calldata consideration Single object can be used, there is use of the array Proof of Concept The single variable can be used instead of offer0.identifier and consideration0 Array is...
Use After Free
libgpac.so is vulnerable for Use After Free. The vulnerability is due to a lack of memory location validation in ctx-reftkw within the ctx-tracks array in the mp4muxconfigurepid function of src/filters/muxisom.c...
SUSE CVE-2023-21636
Memory Corruption due to improper validation of array index in Linux while updating adn record...
Oracle Linux 8 : kernel (ELSA-2020-4431)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4431 advisory. - fs xfs: fix boundary test in xfsattrshortformverify Eric Sandeen 1875316 CVE-2020-14385 - net packet: fix overflow in tpacketrcv Hangbin Liu 1876224...
PT-2023-5512
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An array indexing vulnerability was found in the netfilter subsystem of the Linux kernel. A missing macro could lead to a miscalculation of the h-nets array offset, providing attackers...
Array Mismatch in RdpxV2Core.sol
Lines of code Vulnerability details Impact reserveTokens and reserveAsset are not synced because reserveTokens was not initialized in the constructor. Proof of Concept The RdpxV2Core.sol contract stores the reserve token information and also uses another array to only track the reserve token...
CVE-2022-40534
Memory corruption due to improper validation of array index in Audio...
CVE-2023-21636
Memory Corruption due to improper validation of array index in Linux while updating adn record...
Memory corruption
Memory Corruption due to improper validation of array index in Linux while updating adn record...
Memory corruption
Memory corruption due to improper validation of array index in WLAN HAL when received lmitemNum is out of range...
Memory corruption
Memory corruption due to improper validation of array index in Audio...
CVE-2023-28573 Improper Validation of Array Index in WLAN HAL
Memory corruption in WLAN HAL while parsing WMI command parameters...
CVE-2023-28567 Improper Validation of Array Index in WLAN HAL
Memory corruption in WLAN HAL while handling command through WMI interfaces...
CVE-2023-28565 Improper Validation of Array Index in WLAN HAL
Memory corruption in WLAN HAL while handling command streams through WMI interfaces...
CVE-2023-28558 Improper Validation of Array Index in WLAN HAL
Memory corruption in WLAN handler while processing PhyID in Tx status handler...
CVE-2023-28558 Improper Validation of Array Index in WLAN HAL
Memory corruption in WLAN handler while processing PhyID in Tx status handler...