Funds are sent twice on callTo errors

Handle cmichel Vulnerability details Vulnerability Details The fulfill transaction on the receiving chain tries to call the addFunds and execute actions on txData.callTo. When any of the calls reverts, the funds are sent to the txData.receivingAddress. The txData.callTo is user-controlled and an...

The vulnerability of the mysql-wsrep component of the MariaDB database lies in errors during the processing of input data during syntax analysis. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the mysql-wsrep component of the MariaDB database is related to errors in processing input data during syntax analysis of the code. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

CVE-2021-32526

Incorrect permission assignment for critical resource vulnerability in QSAN Storage Manager allows authenticated remote attackers to access arbitrary password files. Suggest contacting with QSAN and refer to recommendations in QSAN Document...

The vulnerability of the decode_frame function in the libavcodec/exr.c component of the FFmpeg multimedia library involves an operation that outputs values within acceptable buffer data limits. This allows a malicious actor to cause a service failure.

The vulnerability of the decodeframe function in the libavcodec/exr.c component is related to errors in calculations. Exploiting this vulnerability allows a remote attacker to cause a service failure...

The vulnerability of the fly-fm file manager, related to errors in its code, allows a perpetrator to gain access to confidential data.

The vulnerability of the fly-fm file manager is related to an incorrect password request from the user for accessing the password storage. Exploiting this vulnerability allows a malicious actor to gain access to confidential data...

The vulnerability of the MinIO object storage server, related to authentication errors, allows attackers to bypass the readOnly policy and compromise the integrity of the protected information.

The vulnerability of the MinIO object storage server is related to authentication errors. Exploiting this vulnerability allows a malicious actor to bypass the readOnly policy and compromise the integrity of the protected information by creating a temporary URL address “mc share upload”...

The vulnerability of Intel microprogramming software, related to security configuration errors, allows attackers to disclose protected information.

The vulnerability of Intel microprogramming software is related to security configuration errors. Exploiting this vulnerability can allow attackers to disclose protected information...

Users unable to relaunch the published applications, error "Citrix workspace will try to reconnect..."

Users get disconnected from their active published app session When attempting to relaunch the same app, they get a popup saying 'Citrix Workspace app will try to reconnect for xxx more minutes. Click Disconnect if you want to stop'...

Advisory ROSA-SA-2021-1882

Software: libpcap 1.5.3 OS: Cobalt 7.9 CVE-ID: CVE-2019-15165 CVE-Crit: MEDIUM CVE-DESC: sf-pcapng.c in libpcap before 1.9.1 incorrectly checks the length of the PHB header before allocating memory. CVE-STATUS: default CVE-REV: default CVE-ID: CVE-2019-15161 CVE-Crit: MEDIUM CVE-DESC: rpcapd /...

CVE-2021-22351

There is a Credentials Management Errors Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may induce users to grant permissions on modifying items in the configuration table,causing system exceptions...

CVE-2021-22351

CVE-2021-22351 is reported across multiple sources as aCredentials Management Errors vulnerability in Huawei smartphones (EMUI/Magic UI). The connected documents describe a trust/credentials management issue where an attacker could coerce users into granting permissions to modify items in the dev...

CVE-2021-22367

There is a Key Management Errors Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may lead to authentication bypass...

Authentication flaw

There is a Key Management Errors Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may lead to authentication bypass...

CVE-2021-22367

There is a Key Management Errors Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may lead to authentication bypass...

CVE-2021-22367

CVE-2021-22367 is described across multiple sources as a Huawei Smartphone vulnerability titled “Key Management Errors,” with potential authentication bypass. The documents consistently cite the affected product (Huawei Smartphone) and the impact (authentication bypass) but do not provide detaile...

CVE-2021-22370

There is a Credentials Management Errors Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may affect service confidentiality...

Design/Logic Flaw

There is a Key Management Errors Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may affect service confidentiality,availability and integrity...

CVE-2021-22370

Technical details about CVE-2021-22370 are not publicly available in the provided documents. Sources describe a credentials-management error affecting Huawei smartphones but do not specify affected models/versions, root cause, exploitability, or remediation. Monitor for updates.

CVE-2021-22375

CVE-2021-22375 corresponds to a Huawei smartphone vulnerability described as a key management error. The issue could affect service confidentiality, availability and integrity. Publicly documented data show an attacker could access the device over the network with low complexity (no authenticatio...

CVE-2021-22326

HarmonyOS contains a Privilege Dropping / Lowering Errors vulnerability in the selinux debugging code that permits a local attacker to read/write kernel space. Affected component: HarmonyOS kernel/selinux debug path. Impact: local privilege escalation to kernel space; exploit details not provided...