Failed transfer with low level call could be overlooked

Handle harleythedog Vulnerability details Impact There are several places where low level call is used within the contract. In particular, in SavingsAccount.sol, the external withdraw function has the to argument, which is eventually used in this code in transfer: bool success, = to.callvalue:...

CVE-2021-44848

In Cibele Thinfinity VirtualUI before 3.0, /changePassword returns different responses for invalid authentication requests depending on whether the username exists...

CVE-2021-44848

In Cibele Thinfinity VirtualUI before 3.0, /changePassword returns different responses for invalid authentication requests depending on whether the username exists...

Authentication flaw

In Cibele Thinfinity VirtualUI before 3.0, /changePassword returns different responses for invalid authentication requests depending on whether the username exists...

django: Potential directory traversal via ``admindocs``

A flaw was found in django. Staff members could use the :mod:django.contrib.admindocs TemplateDetailView view to check the existence of arbitrary files. Additionally, if and only if the default admindocs templates have been customized by the developers to also expose the file contents, then not...

Bentley Systems Bentley View 资源管理错误漏洞

Bentley View is a free viewer from Bentley Systems, Inc. A memory mis-reference vulnerability exists in Bentley View J2K File Parsing, which results from not verifying the existence of an object prior to J2K File Parsing. An attacker could exploit this vulnerability to execute code in the context...

Bentley Systems Bentley View 资源管理错误漏洞

Bentley View, a free viewer from Bentley Systems, Inc. A security vulnerability exists in Bentley View JT file parsing, which is caused by failing to verify the existence of an object before performing an operation on it. An attacker could exploit this vulnerability to execute code in the context...

Bentley View JP2 File Parsing Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

Bentley View FBX File Parsing Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

Open Design Alliance Drawings SDK Post-release Reuse Vulnerability (CNVD-2022-00615)

The Open Design Alliance Drawings SDK is a software development kit for drawing design from Open Design Alliance, Inc. The Open Design Alliance Drawings SDK is vulnerable to a post-release reuse vulnerability caused by failure to verify the existence of an object before performing operations on i...

Open Design Alliance Drawings SDK 资源管理错误漏洞

The Open Design Alliance Drawings SDK is a software development kit for drawing design from Open Design Alliance, Inc. The Open Design Alliance Drawings SDK is vulnerable to a post-release reuse vulnerability caused by failure to verify the existence of an object before performing operations on i...

Open Design Alliance (ODA) ODAViewer DWG File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA ODAViewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

karsmanset.com Cross Site Scripting vulnerability OBB-2272358

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Zivver: Timing difference exposes existence of accounts

This report concerns a timing-based enumeration of user accounts through the authentication endpoint. While the Zivver product offers intended ways to identify if another person is a Zivver user by their email address, this report was novel in that it allows this behavior pre-authentication...

medcollege.edu.gr Cross Site Scripting vulnerability OBB-2218253

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2021-37807

An SQL Injection vulneraility exists in https://phpgurukul.com Online Shopping Portal 3.1 via the email parameter on the /checkavailability.php endpoint that serves as a checker whether a new user's email is already exist within the database...

Foxit PDF Editor 缓冲区错误漏洞

Foxit PDF Editor is China Foxit Foxit company a PDF editor. Foxit PDF has a buffer overflow vulnerability that originates from not verifying the existence of an object before performing an operation on it, which can be exploited by a remote attacker to execute arbitrary code on an affected PDF...

Foxit PDF Editor 缓冲区错误漏洞

Foxit PDF Reader is a PDF reader from the Chinese company Foxit. A buffer error vulnerability exists in Foxit PDF, which arises from a failure to validate the existence of an object before performing an operation on it, and allows a remote attacker to execute arbitrary code on an affected PDF...

Foxit PDF Editor 缓冲区错误漏洞

Foxit PDF Editor is a PDF editor from the Chinese company Foxit Foxit. A buffer error vulnerability exists in Foxit PDF, which arises from a failure to validate the existence of an object before performing an operation on it, allowing a remote attacker to execute arbitrary code on an affected PDF...

Foxit PDF Reader 缓冲区错误漏洞

Foxit PDF Reader is a PDF reader from Foxit China. Foxit PDF Reader is vulnerable to an information disclosure vulnerability that originates when the product does not verify the existence of an object when parsing PDF files. An attacker can exploit this and other vulnerabilities to execute...