ClearingHouse looping over dynamic array might result in a DOS because of the block gas limit

Lines of code Vulnerability details Impact Inside the ClearingHouse contract there are multiple instances where it loops over the dynamic amms array. There is no way looping over a subset of the array or continuing for you left off. Thus, if the array is large enough certain functions won't be...

Security Bulletin: Multiple IBM MQ vulnerabilities affect IBM Sterling Global Mailbox

Summary IBM MQ is shipped with IBM Sterling Global Mailbox. Multiple vulnerabilities impacts IBM MQ. Remediation is available for the issues. Vulnerability Details CVEID: CVE-2019-4227 DESCRIPTION: IBM MQ 8.0.0.4 - 8.0.0.12, 9.0.0.0 - 9.0.0.6, 9.1.0.0 - 9.1.0.2, and 9.1.0 - 9.1.2 AMQP Listeners...

OTRS cross-site scripting vulnerability (CNVD-2022-13927)

OTRS is an open source defect tracking and management system software. OTRS suffers from a cross-site scripting vulnerability that originates in a dynamic field that can be configured by OTRS administrators, where malicious JavaScript code can be injected in the error message of a regular...

CVE-2022-25366

Cryptomator through 1.6.5 allows DYLIB injection because, although it has the flag 0x1000 for Hardened Runtime, it has the com.apple.security.cs.disable-library-validation and com.apple.security.cs.allow-dyld-environment-variables entitlements. An attacker can exploit this by creating a malicious...

PT-2022-17244 · Unknown · Cryptomator

Name of the Vulnerable Software and Affected Versions: Cryptomator versions 1.6.5 and earlier Description: The issue allows DYLIB injection because, although it has the flag 0x1000 for Hardened Runtime, it has the com.apple.security.cs.disable-library-validation and...

Cryptomator 代码问题漏洞

Cryptomator is a simple digital self-defense tool from the Cryptomator community. It is used to protect data. Cryptomator suffers from a code issue vulnerability that stems from the fact that an attacker can exploit the vulnerability can exploit this by creating a malicious .dylib file that can b...

多款D-Link产品操作系统命令注入漏洞

D-Link DIR-820L and others are products of China-based AUO D-Link.D-Link DIR-820L is a dual-band wireless router.D-Link Dir-830L is a wireless Ac1200 dual-band cloud router.D-Link Dir-810L is a wireless Ac750 dual-band cloud router. An operating system command injection vulnerability exists in...

GHSA-CG3Q-J54F-5P7P vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner...

GHSA-CG3Q-J54F-5P7P vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner-fips, dynamic-localpv-provisioner...

[SECURITY] [DLA-2925-1] drupal7 security update

Package : drupal7 Version : 7.52-2+deb9u18 This security updates includes two fixes, backported respectively from Drupal version 7.87 and 7.88: - Fix a regression caused by Query ui position backport in version 7.86 backported as 7.52-2+deb9u17: was not checking for possible "undefined" value in...

CVE-2022-23202

Adobe Creative Cloud Desktop version 2.7.0.13 and earlier is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must download a...

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

l4srs Rust implementation of the Log 4 Shell log 4 j - CVE-20...

The vulnerability of the console.table() function implementation in Node.js’s software platform allows attackers to trigger a service failure or bypass security restrictions.

The vulnerability of the console.table function implementation in Node.js.js platforms is related to insufficient control over dynamically defined object properties. Exploiting this vulnerability could allow a malicious actor to trigger service failures or circumvent security restrictions by...

ZOHO ManageEngine Applications Manager 代码问题漏洞

ZOHO ManageEngine Applications Manager is a set of IT operation and maintenance management solutions of the United States ZhuoHao ZOHO company. The product features application performance management, fault management, report generation, and SLA management. A code issue vulnerability exists in Zo...

The vulnerability of the DevTools set of tools for web development in the Google Chrome browser allows a hacker to execute arbitrary code.

The vulnerability of the DevTools set of tools for web development in the Google Chrome browser is related to buffer overflow errors in dynamic memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

CVE-2022-21698 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner-fips, dynamic-localpv-provisioner...

CVE-2022-21698 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner...

Remote Code Execution

mockserver-core is vulnerable to remote code execution. The use of dynamic creation of expectations using Javascript or Velocity templates and default CORS configuration in MockServer allow an attacker to inject malicious script while running MockServer locally...

PT-2022-15982 · Axis · Axis Ip Utility

Name of the Vulnerable Software and Affected Versions: AXIS IP Utility versions prior to 4.18.0 Description: The issue allows for remote code execution and local privilege escalation through DLL hijacking. IPUtility.exe attempts to load DLLs from its current working directory, which could allow f...

AXIS IP Utility 代码问题漏洞

Axis Ip Utility is used by Axis of Sweden to help set the Ip address of Axis network video products. AXIS IP Utility has a code issue vulnerability that stems from AXIS IP Utility allowing remote code execution and local privilege escalation via DLL hijacking...