IsWrappedFcash check is a gas bomb

Lines of code Vulnerability details Impact In the isWrappedFCash check, the notionalTradeModule check whether the component is a wrappedCash with the following logic. try IWrappedfCashfCashPosition.getDecodedID returnsuint16 currencyId, uint40 maturity try...

Missing receive() or fallback() payable function as native token is expected from WETH

Lines of code Vulnerability details receive or fallback payable function is missing in the current implementation of wfCashERC4626, calling WETH.withdraw will revert. WETH.withdrawdepositAmountExternal; As a result, mintInternal when isETH == true will revert. --- The text was updated successfull...

GHSA-27MX-GCHC-6XJP Unhandled crash in npm posix

This affects all versions of package posix. When invoking the toString method, it will fallback to 0x0 value, as the value of toString is not invokable not a function, and then it will crash with type-check...

CVE-2022-21211

This affects all versions of package posix. When invoking the toString method, it will fallback to 0x0 value, as the value of toString is not invokable not a function, and then it will crash with type-check...

posix 安全漏洞

posix is a portable operating system interface. A security vulnerability exists in all versions of posix, which stems from a call to the toString method that falls back to the value 0x0 and can be exploited by an attacker to conduct a Dos attack...

transfer is used for transfering ether

Originally submitted by warden pauliax in 173, duplicate of 52. .transfer is used for transfering ether, e.g.: payableto.transferamount; payablemsg.sender.transferamount; It is currently not recommended as recipients with custom fallback functions smart contracts will not be able to handle that...

CEther.doTransferOut() May Revert Because .transfer() Uses A Fixed Amount Of Gas

Lines of code Vulnerability details Impact The .transfer function intends to transfer an ETH amount with a fixed amount of 2300 gas. This function is not equipped to handle changes in the underlying .send and .transfer functions which may supply different amounts of gas in the future. Additionall...

PT-2022-30170

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.14 through v5.15.32 Description The issue concerns the AEAD software fallback for the engine in the Linux Kernel. It was introduced in version v5.14 and fixed in version v5.15.33. The actual impact and attack...

PT-2022-29858

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.14 through v5.16.18 Description The issue concerns the AEAD software fallback for the engine in the Linux Kernel. It was introduced in version v5.14 and fixed in version v5.16.19. The actual impact and attack...

PT-2022-29551

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.14 through v5.17.1 Description The issue concerns the AEAD software fallback for the engine in the Linux Kernel. It was introduced in version v5.14 and fixed in version v5.17.2. The actual impact and attack plausibilit...

The vulnerability of the put_epel_hv_fallback function in the h.265 Libde265 implementation allows a perpetrator to trigger a service failure.

The vulnerability of the putepelhvfallback function in the h.265 Libde265 implementation is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created file...

The vulnerability of the put_qpel_fallback function in the h.265 Libde265 implementation allows a perpetrator to trigger a service failure.

The vulnerability of the putqpelfallback function in the h.265 Libde265 implementation is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows a malicious actor to trigger a service failure using a specially created file...

libde265 1.0.8, was discovered to contain a heap-buffer-overflow in put_epel_16_fallback (fallback-motion.cc)

Description libde265 1.0.8, was discovered to contain a heap-buffer-overflow in putepel16fallback fallback-motion.cc ENV - Version : 1.0.8 - Commit : 45904e5667c5bf59c67fcdc586dfba110832894c - OS : Ubuntu 18.04 - Configure : cmake -DCMAKEBUILDTYPE=Debug -DCMAKECXXCOMPILER=clang++-10...

WS-2022-0441

libde265 1.0.8, was discovered to contain a heap-buffer-overflow in putepel16fallback fallback-motion.cc in strukturag/libde265...

The vulnerability of the put_qpel_0_0_fallback_16 function in the h.265 Libde265 implementation allows a attacker to trigger a service failure.

The vulnerability of the putqpel00fallback16 function in the h.265 Libde265 implementation is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created file...

The vulnerability of the `put_weighted_bipred_16_fallback` function in the h.265 Libde265 implementation allows a perpetrator to trigger a service failure.

The vulnerability of the putweightedbipred16fallback function in the h.265 Libde265 implementation is related to writing outside the buffer boundaries. Exploiting this vulnerability allows a malicious actor to trigger a service failure using a specially created file...

CVE-2022-0653

The Profile Builder – User Profile & User Registration Forms WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient escaping and sanitization of the siteurl parameter found in the /assets/misc/fallback-page.php file which allows attackers to inject arbitrary web scripts onto a...

CVE-2022-0653

The Profile Builder – User Profile & User Registration Forms WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient escaping and sanitization of the siteurl parameter found in the /assets/misc/fallback-page.php file which allows attackers to inject arbitrary web scripts onto a...

CVE-2022-0653: Improper Neutralization of Input During Web Page Generation

The Profile Builder – User Profile & User Registration Forms WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient escaping and sanitization of the siteurl parameter found in the /assets/misc/fallback-page.php file which allows attackers to inject arbitrary web scripts onto a...

PT-2022-13332

Name of the Vulnerable Software and Affected Versions The Profile Builder – User Profile & User Registration Forms WordPress plugin versions up to and including 3.6.1 Description The issue arises from insufficient escaping and sanitization of the site url parameter found in the...