CVE-2021-46337: Reachable Assertion

There is an Assertion 'pagep != NULL' failed at /parser/js/js-parser-mem.cparserlistget in JerryScript 3.0.0...

JerryScript 安全漏洞

JerryScript, a lightweight JavaScript engine from the JerryScript project, has a denial-of-service vulnerability in version 3.0.0, which stems from a failed assertion in /jerry-core/ecma/base/ecma-literal-storage.c. case, an attacker could use this vulnerability to launch a denial of service...

CVE-2021-46345: Reachable Assertion

There is an Assertion 'cesu8cursorp == cesu8endp' failed at /jerry-core/lit/lit-strings.c in JerryScript 3.0.0...

PT-2022-10290

Name of the Vulnerable Software and Affected Versions ownCloud files antivirus component versions prior to 1.0.0 Description The issue arises from the mishandling of the protection mechanism in the files antivirus component. This mechanism is supposed to delete malicious files that have been...

CVE-2021-43436

MartDevelopers Inc iResturant v1.0 allows Stored XSS by placing a payload in the username field during a login attempt. When an administrator looks at the log of failed logins, the XSS payload will be executed...

CVE-2021-43436

MartDevelopers Inc iResturant v1.0 allows Stored XSS by placing a payload in the username field during a login attempt. When an administrator looks at the log of failed logins, the XSS payload will be executed...

CVE-2021-43436

MartDevelopers Inc iResturant v1.0 allows Stored XSS by placing a payload in the username field during a login attempt. When an administrator looks at the log of failed logins, the XSS payload will be executed...

Information Disclosure

@replit/crosis is vulnerable to information disclosure. The vulnerability exists due to the exposure of sensitive information, multiple communication failed attempts to Replit, allowing an attacker to access the previous URL and retrieve the same destination without permission...

PT-2022-11837

Name of the Vulnerable Software and Affected Versions MartDevelopers Inc iResturant version 1.0 Description The issue allows Stored XSS by placing a payload in the username field during a login attempt. When an administrator looks at the log of failed logins, the XSS payload will be executed...

Business Logic Errors in silverstripe/silverstripe-framework

Description SilverStripe Framework is vulnerable to Business Logic Errors in the Failed login count since that value can be a negative number. Proof of Concept 1.After login, go to Security page under the path /admin/security/ 2.Click on any member record 3.In the member edit form, enter a negati...

CVE-2021-46045

GPAC 1.0.1 is affected by: Abort failed. The impact is: cause a denial of service context-dependent...

CVE-2021-46045

GPAC 1.0.1 is affected by: Abort failed. The impact is: cause a denial of service context-dependent...

CVE-2021-36409

There is an Assertion scalinglistpredmatrixiddelta==1' failed at sps.cc:925 in libde265 v1.0.8 when decoding file, which allows attackers to cause a Denial of Service DoS by running the application with a crafted file or possibly have unspecified other impact...

CVE-2021-46045

GPAC 1.0.1 is affected by: Abort failed. The impact is: cause a denial of service context-dependent...

CVE-2021-46045: Undefined Security Weakness

GPAC 1.0.1 is affected by: Abort failed. The impact is: cause a denial of service context-dependent...

“Failed to resolve team (ID: , name: ): Organization (ID: ) which the team (ID: ) belongs to not found” when performing Microsoft Teams backup

Update:January 2024 There have been several reported instances where, under specific circumstances, the issue discussed in this article has occurred while running Veeam Backup for Microsoft 365 6.x. All customers are encouraged to upgrade to the latest version of Veeam Backup for Microsoft 365 at...

GSD-2021-1002551 drm/amd/amdkfd: Fix kernel panic when reset failed and been triggered again

drm/amd/amdkfd: Fix kernel panic when reset failed and been triggered again This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.7 by commit...

Failed transfer with low level call could be overlooked

Handle harleythedog Vulnerability details Impact There are several places where low level call is used within the contract. In particular, in SavingsAccount.sol, the external withdraw function has the to argument, which is eventually used in this code in transfer: bool success, = to.callvalue:...

Matkt Hyperledger Besu 安全漏洞

Matkt Hyperledger Besu is an open source application from Matkt. It is used to run, maintain, debug and monitor nodes in the Ethernet network. A security vulnerability exists in Besu starting in version 21.10.0, which stems from changes in the software implementation of the SHL, SHR, and SAR...

Oracle Linux 8 : bind (ELSA-2021-4384)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-4384 advisory. 32:9.11.26-6 - Use random entropy to generate unique TKEY identifiers 1980916 32:9.11.26-5 - Fix possible assertion failure iscrefcountcurrent == 0 in freerbtdb...