[WP-H3] money-market-contracts/oracle#feed_prices() delayed transaction may disrupt price feeds

Lines of code Vulnerability details The implementation only takes two attributes: asset and price. And the lastupdatedtime of the record will always be set to the current block.time. This makes it possible for the price feeds to be disrupted when the network is congested, or the endpoint is down...

The vulnerability of software for the development and mass production of printed circuit boards, related to errors in processing uploaded files, allows a perpetrator to gain access to protected information or cause service failures.

The vulnerability of software for the development and mass production of printed circuit boards is related to errors in processing uploaded files. Exploiting this vulnerability can allow a malicious actor to gain access to protected information or cause service failures by sending a specially...

The vulnerability of the RouterOS operating system in MikroTik routers allows a hacker to cause a service failure.

The vulnerability of the RouterOS operating system for MikroTik routers lies in the fact that operations are performed outside of the buffer in memory. Exploiting this vulnerability allows a malicious actor to cause a service failure through a specially crafted FTP request...

Toyota’s just in time manufacturing faced with disruptive cyberattack

Toyota suspended the operation of 28 lines at 14 plants in Japan on Tuesday, March 1, after a cyberattack on supplier Kojima Industries Corp. Some plants operated by Toyotas affiliates Hino Motors and Daihatsu are included in the shutdown. Hino suspended all operations at its Koga facility, which...

CVE-2022-23970

ASUS RT-AX56U’s updatejson function has a path traversal vulnerability due to insufficient filtering for special characters in the URL parameter. An unauthenticated LAN attacker can overwrite a system file by uploading another file with the same file name, which results in service disruption...

PT-2022-10706 · Liferay · Liferay Dxp +1

Name of the Vulnerable Software and Affected Versions: Liferay Portal versions 7.2.1 and earlier Liferay DXP versions 7.0 through 7.0 before fix pack 90 Liferay DXP versions 7.1 through 7.1 before fix pack 17 Liferay DXP versions 7.2 through 7.2 before fix pack 5 Description: The issue concerns t...

The vulnerability of the software development service provided by SAP NetWeaver Development Infrastructure allows attackers to disclose sensitive information or cause service failures.

The vulnerability of the software development service for SAP NetWeaver Development Infrastructure lies in the insufficient verification of incoming requests. Exploiting this vulnerability allows a malicious actor to disclose sensitive information or cause service failures...

Asus Rog Live Service 后置链接漏洞

ASUS Rog Live Service is a Desktop Shareware program from ASUS in China. A security vulnerability exists in ASUS Rog Live Service, which stems from a feature in ROG Live Service that deletes temporary files created by the installation without verifying the path before deletion, which can be...

The vulnerability of the Bidirectional Forwarding Detection (BFD) protocol implementation in Cisco NX-OS router operating systems allows a attacker to cause a service failure.

The vulnerability of the Bidirectional Forwarding Detection BFD protocol implemented in Cisco NX-OS router operating systems is related to deficiencies in rate limiting. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by sending unlimited traffic...

CVE-2020-4925

A security vulnerability in the Spectrum Scale 5.0 and 5.1 allows a non-root user to overflow the mmfsd daemon with requests and preventing the daemon to service other requests. IBM X-Force ID: 191599...

The vulnerability of the Vim text editor lies in its access to memory cells before the buffer starts, allowing an attacker to cause a service failure or execute arbitrary code.

The vulnerability of the Vim text editor relates to access to memory cells prior to the buffer’s start. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code...

The vulnerability of the nft_fwd_dup_netdev_offload() function in the netfilter subsystem of Linux operating systems allows a hacker to increase their privileges or cause service failures.

The vulnerability of the nftfwddupnetdevoffload function in the netfilter subsystem of Linux operating systems stems from the execution of a write operation beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges or cause service...

HUAWEI EMUI/Magic UI 安全漏洞

HUAWEI EMUI is an Android-based mobile operating system developed by Huawei China. HUAWEI EMUI/Magic UI suffers from a denial-of-service vulnerability that can be exploited by attackers to perform DoS attacks and compromise service integrity...

The vulnerability of the ping_unhash function (net/ipv4/ping.c) in the Linux operating system allows a hacker to increase their privileges or cause service failures.

The vulnerability of the pingunhash function net/ipv4/ping.c in the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to increase their privileges or cause service interruptions...

The vulnerabilities of the `pipe_read` and `pipe_write` functions in the `fs/pipe.c` file of the Linux operating system’s kernel allow attackers to increase their privileges or cause service failures.

The vulnerability of the piperead and pipewrite functions in the fs/pipe.c file of the Linux operating system’s kernel is related to code errors. Exploiting this vulnerability can allow an attacker to enhance their privileges or cause service failures...

CVE-2022-22333

IBM Sterling Secure Proxy 6.0.3.0, 6.0.2.0, and 3.4.3.2 and IBM Sterling External Authentication Server are vulnerable a buffer overflow, due to the Jetty based GUI in the Secure Zone not properly validating the sizes of the form content and/or HTTP headers submitted. A local attacker positioned...

CVE-2022-22333

IBM Sterling Secure Proxy 6.0.3.0, 6.0.2.0, and 3.4.3.2 and IBM Sterling External Authentication Server are vulnerable a buffer overflow, due to the Jetty based GUI in the Secure Zone not properly validating the sizes of the form content and/or HTTP headers submitted. A local attacker positioned...

CVE-2022-22333

IBM Sterling Secure Proxy 6.0.3.0, 6.0.2.0, and 3.4.3.2 and IBM Sterling External Authentication Server are vulnerable a buffer overflow, due to the Jetty based GUI in the Secure Zone not properly validating the sizes of the form content and/or HTTP headers submitted. A local attacker positioned...

The vulnerability of the email verification component (DANE) based on DNS in Cisco AsyncOS operating system for the Cisco Email Security Appliance allows a attacker to trigger a service failure.

The vulnerability of the email verification component DANE in Cisco AsyncOS operating systems for the Cisco Email Security Appliance is related to resource management errors. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

CVE-2021-46701

PreMiD 2.2.0 allows unintended access via the websocket transport. An attacker can receive events from a socket and emit events to a socket, potentially interfering with a victim's "now playing" status on Discord...