Staking tokens can be stolen

Lines of code Vulnerability details Impact The staking contract keeps track of shares of each user. When withdrawing from the staking contract the amount parameter is converted to shares and this value is decreased shares = amount / totalbalance totalshare. This shares calculation rounds down whi...

CVE-2021-39025

IBM Guardium Data Encryption GDE 4.0.0.0 and 5.0.0.0 could disclose internal IP address information when the web backend is down. IBM X-Force 213863...

CVE-2021-3658

bluetoothd from bluez incorrectly saves adapters' Discoverable status when a device is powered down, and restores it when powered up. If a device is powered down while discoverable, it will be discoverable when powered on again. This could lead to inadvertent exposure of the bluetooth stack to...

PT-2022-7623 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The vulnerability is related to the ipv6 component of the Linux kernel and is caused by a memory leak. When the network device is going down or IPv6 is disabled on the interface, the...

PT-2024-11805

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.16.5-00042-g8f5585009b24 Description The issue arises when a system with LX2160A and Marvell DSA switches undergoes a reboot while the DSA master dpaa2-eth is active. This leads to a panic due to the...

CVE-2022-21670

markdown-it is a Markdown parser. Prior to version 1.3.2, special patterns with length greater than 50 thousand characterss could slow down the parser significantly. Users should upgrade to version 12.3.2 to receive a patch. There are no known workarounds aside from upgrading...

CVE-2022-21670

markdown-it is a Markdown parser. Prior to version 1.3.2, special patterns with length greater than 50 thousand characterss could slow down the parser significantly. Users should upgrade to version 12.3.2 to receive a patch. There are no known workarounds aside from upgrading...

GHSA-6VVH-5794-VPMJ An issue in Atomix v3.1.5 allows attackers to cause a denial of service (DoS) via false member down event messages.

An issue in Atomix v3.1.5 allows attackers to cause a denial of service DoS via false member down event messages...

An issue in Atomix v3.1.5 allows attackers to cause a denial of service (DoS) via false member down event messages.

An issue in Atomix v3.1.5 allows attackers to cause a denial of service DoS via false member down event messages...

CVE-2020-35216

An issue in Atomix v3.1.5 allows attackers to cause a denial of service DoS via false member down event messages...

CVE-2020-35216

An issue in Atomix v3.1.5 allows attackers to cause a denial of service DoS via false member down event messages...

Design/Logic Flaw

An issue in Atomix v3.1.5 allows attackers to cause a denial of service DoS via false member down event messages...

CVE-2020-35216

An issue in Atomix v3.1.5 allows attackers to cause a denial of service DoS via false member down event messages...

CVE-2020-35216: Concurrent Execution using Shared Resource with Improper Synchronization

An issue in Atomix v3.1.5 allows attackers to cause a denial of service DoS via false member down event messages...

PT-2021-11731

Name of the Vulnerable Software and Affected Versions: Atomix version 3.1.5 Description: The issue allows attackers to cause a denial of service DoS via false member down event messages. Recommendations: For Atomix version 3.1.5, at the moment, there is no information about a newer version that...

GSD-2021-1002333 scsi: lpfc: Fix link down processing to address NULL pointer dereference

scsi: lpfc: Fix link down processing to address NULL pointer dereference This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.5 by commit...

USN-5155-1 bluez vulnerabilities

It was discovered that BlueZ incorrectly handled the Discoverable status when a device is powered down. This could result in devices being powered up discoverable, contrary to expectations. This issue only affected Ubuntu 20.04 LTS, Ubuntu 21.04, and Ubuntu 21.10. CVE-2021-3658 It was discovered...

kernel security, bug fix, and enhancement update

4.18.0-348.OL8 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and shim-x...

PT-2021-30251

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.288 Description A potential issue exists in the Linux Kernel, where the down interruptible function in virt efi reset system is changed to down trylock. The actual impact and attack plausibility have not yet...

PT-2021-30376

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.14 Description A potential issue exists in the Linux Kernel, where the down interruptible function in virt efi reset system is changed to down trylock. The actual impact and attack plausibility have not yet...