4D Windows Server Code Issue Vulnerability

4D Windows Server is a family of applications from 4D USA. A code issue vulnerability exists in 4D Windows Server that originates from a DLL hijacking that can lead to arbitrary code execution by replacing shfolder.dll in the installation path...

Trellix Enterprise Security Manager Code Issue Vulnerability

Trellix Enterprise Security Manager is an application from American FireEye Trellix, Inc. for real-time monitoring and analysis enables you to quickly prioritize, investigate and respond to hidden threats. A code issue vulnerability exists in Trellix Enterprise Security Manager versions prior to...

Plesk Installer Code Issue Vulnerability

Plesk Installer is an installer program from the Swiss company Plesk. A code issue vulnerability exists in Plesk Installer version 3.27.0.0, which originates from a code issue that allows a local attacker to execute arbitrary code by injecting a DLL file into the same folder where the application...

IBM QRadar WinCollect Agent Code Issue Vulnerability

IBM QRadar WinCollect Agent is an agent program from International Business Machines IBM for collecting and sending Windows event logs. A code issue vulnerability exists in IBM QRadar WinCollect Agent versions 10.0 through 10.1.7 that stems from improper coding. An attacker could exploit the...

Xiamen Four-Faith Communication Technology Video Surveillance Management System Code Issue Vulnerability

Xiamen Four-Faith Communication Technology Video Surveillance Management System is a video surveillance management system developed by Xiamen Four-Faith Communication Technology Xiamen, China. Xiamen Four-Faith Communication Technology is a video surveillance management system. A code issue...

IBM QRadar WinCollect Agent 安全漏洞

IBM QRadar WinCollect Agent is an agent program from International Business Machines IBM for collecting and sending Windows event logs. A code issue vulnerability exists in IBM QRadar WinCollect Agent versions 10.0 through 10.1.7 that stems from improper coding. An attacker could exploit the...

openNDS Code Issues Vulnerabilities

openNDS is openNDS open source a high-performance, small footprint portal system. A code issue vulnerability exists in versions prior to openNDS 10.1.2 that stems from the presence of a NULL pointer dereference, which can be exploited by an attacker to cause a denial of service...

asD::withdrawCarry assumes wrong number of decimals returned by exchangeRateCurrent which will cause owner to not be able to withdraw revenue

Lines of code Vulnerability details tl;dr asD::withdrawCarry assumes that the exchange rate returned by the cNote contract will be scaled by 1e28, but in reality it will be only scaled by 1e18. It will cause withdrawCarry to always revert with Integer Underflow, which means that owner won't ever ...

openNDS Code Issues Vulnerabilities

openNDS is openNDS open source a high-performance, small footprint portal system. A code issue vulnerability exists in versions prior to openNDS 10.1.2 that stems from the presence of a NULL pointer dereference, which can be exploited by an attacker to cause a denial of service...

Intel Arc Code Issue Vulnerability

Intel Arc is a line of graphics cards from Intel Corporation USA. Intel Arc is vulnerable to a code issue. An attacker exploiting this vulnerability could cause privilege escalation, denial of service, and information disclosure...

Intel Arc Code Issue Vulnerability

Intel Arc is a line of graphics cards from Intel Corporation USA. Intel Arc is vulnerable to a code issue. An attacker exploiting this vulnerability could cause privilege escalation, denial of service, and information disclosure...

WordPress Plugin Download Monitor Code Issue Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

Missing highBid value update returnHighestBidder would return the wrong HighestBidder causing nft to be minted to the wrong winner

Lines of code Vulnerability details Impact returnHighestBidder is used in checking who the winner is, however the code implemented in doing this was flawed as it missed updating highBid variable for the current higest bid found so far before next iteration. Missing this would cost function to...

Lenovo System Update Code Issue Vulnerability

Lenovo System Update is a simple, secure, automated system update program for Lenovo devices from Lenovo China. A code issue vulnerability exists in Lenovo System Update that stems from a path traversal vulnerability...

Group Office CRM Code Issue Vulnerability

Group Office CRM is a software application. Share projects, calendars, files and emails with colleagues and clients online. Easy to use and fully customizable. A code issue vulnerability exists in Group Office CRM that stems from the presence of a server-side request forgery SSRF vulnerability th...

SAP Enable Now Code Issue Vulnerability

SAP Enable Now is a collaborative content creation, management and sharing platform from SAP. The platform is primarily used for e-learning and training in SAP and non-SAP systems. SAP Enable Now suffers from a code issue vulnerability that stems from an unimplemented X-FRAME-OPTIONS response...

LinkStack Code Issues Vulnerabilities

LinkStack is a unique platform from LinkStack Open Source that provides an efficient solution for managing and sharing links online. A code issue vulnerability exists in versions prior to LinkStack v4.2.9 that stems from an insufficient setting of the session expiration time after a password chan...

SolarWinds Access Rights Manager Code Issue Vulnerability

SolarWinds Access Rights Manager is a lightweight review management system from SolarWinds. A code issue vulnerability exists in SolarWinds Access Rights Manager. An attacker could exploit this vulnerability to remotely execute code...

SolarWinds Access Rights Manager Code Issue Vulnerability

SolarWinds Access Rights Manager is a lightweight review management system from SolarWinds. A code issue vulnerability exists in SolarWinds Access Rights Manager. An attacker could exploit this vulnerability to remotely execute code...

SolarWinds Access Rights Manager Code Issue Vulnerability

SolarWinds Access Rights Manager is a lightweight review management system from SolarWinds, Inc. A code issue vulnerability exists in SolarWinds Access Rights Manager that stems from allowing authenticated users to abuse the SolarWinds ARM API...