9204 matches found
CVE-2023-52368
Input verification vulnerability in the account module.Successful exploitation of this vulnerability may cause features to perform abnormally...
CVE-2023-52368
A denial of service vulnerability exists in Huawei HarmonyOS and Huawei EMUI due to an input validation flaw in the Accounts module . An attacker can exploit this vulnerability to cause system functions to operate abnormally. No specific exploit links or remediation versions are provided in the d...
CVE-2023-52368
Input verification vulnerability in the account module.Successful exploitation of this vulnerability may cause features to perform abnormally...
CVE-2023-52365
Out-of-bounds read vulnerability in the smart activity recognition module.Successful exploitation of this vulnerability may cause features to perform abnormally...
CVE-2023-52365
Huawei EMUI and HarmonyOS are affected by an out-of-bounds read vulnerability within the smart activity recognition module . This flaw, also characterized as a buffer copy without checking input size, can be exploited by an attacker to cause a denial of service or cause features to perform abnorm...
CVE-2023-52368: Improper Input Validation
Input verification vulnerability in the account module.Successful exploitation of this vulnerability may cause features to perform abnormally...
CVE-2023-52365: Buffer Copy without Checking Size of Input
Out-of-bounds read vulnerability in the smart activity recognition module.Successful exploitation of this vulnerability may cause features to perform abnormally...
SUSE CVE-2024-0793
A flaw was found in kube-controller-manager. This issue occurs when the initial application of a HPA config YAML lacking a .spec.behavior.scaleUp block causes a denial of service due to KCM pods going into restart churn...
PT-2024-14555
Name of the Vulnerable Software and Affected Versions Smart activity recognition module affected versions not specified Description The issue is related to an out-of-bounds read vulnerability in the smart activity recognition module. Successful exploitation of this issue may cause features to...
PT-2024-14556
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description The issue is an out-of-bounds read vulnerability in the smart activity recognition module. Successful exploitation of this vulnerability may cause feature...
PT-2024-14558
Name of the Vulnerable Software and Affected Versions Software affected versions not specified Description The issue is related to an input verification vulnerability in the account module. Successful exploitation of this vulnerability may cause features to perform abnormally. Recommendations At...
Hacking Microsoft and Wix with Keyboard Shortcuts
Browser vendors continuously tweak and refine browser functionalities to improve security. Implementing same-site cookies is a prime example of vendors’ efforts to mitigate Cross-Site Request Forgery CSRF attacks. However, not all security measures are foolproof. In their quest to combat Cross-Si...
CVE-2024-24300
4ipnet EAP-767 v3.42.00 is vulnerable to Incorrect Access Control. The device uses the same set of credentials, regardless of how many times a user logs in, the content of the cookie remains unchanged...
CVE-2024-24259
A memory leak flaw was found in the glutAddMenuEntry function of freeglut, an open-source alternative to the OpenGL Utility Toolkit. This issue may allow an attacker to launch a denial of service attack by crashing or hanging the program or take advantage of other unexpected program behavior...
MAL-2024-993 Malicious code in privdel (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis edd03ccc68c5b01bcfcb939f4794749d8c8a797d45611b86636883add7bb5b44 The OpenSSF Package Analysis project identified 'privdel' @ 1.999.0 npm as malicious. It is considered malicious because: - The package executes...
runc: file descriptor leak
A file descriptor leak issue was found in the runc package. While a user performs OCLOEXEC all file descriptors before executing the container code, the file descriptor is open when performing setcwd2, which means that the reference can be kept alive in the container by configuring the working...
Vyper negative array index bounds checks
Summary Arrays can be keyed by a signed integer, while they are defined for unsigned integers only. The typechecker doesn't throw when spotting the usage of an int as an index for an array. Typically, negative integers are filtered out at runtime by the bounds checker, but small enough i.e. large...
GHSA-52XQ-J7V9-V4V2 Vyper negative array index bounds checks
Summary Arrays can be keyed by a signed integer, while they are defined for unsigned integers only. The typechecker doesn't throw when spotting the usage of an int as an index for an array. Typically, negative integers are filtered out at runtime by the bounds checker, but small enough i.e. large...
PYSEC-2024-150
Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine. Arrays can be keyed by a signed integer, while they are defined for unsigned integers only. The typechecker doesn't throw when spotting the usage of an int as an index for an array. The typechecker allows the usage of...
PYSEC-2024-150
Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine. Arrays can be keyed by a signed integer, while they are defined for unsigned integers only. The typechecker doesn't throw when spotting the usage of an int as an index for an array. The typechecker allows the usage of...