CVE-2022-37930

A security vulnerability has been identified in HPE Nimble Storage Hybrid Flash Arrays and HPE Nimble Storage Secondary Flash Arrays which could potentially allow local disclosure of sensitive information...

Design/Logic Flaw

Insufficient Verification of Data Authenticity vulnerability in Hewlett Packard Enterprise HPE Nimble Storage Hybrid Flash Arrays and Nimble Storage Secondary Flash Arrays...

Hewlett Packard Enterprise OneView 数据伪造问题漏洞

Hewlett Packard Enterprise OneView is a software from Hewlett Packard Enterprise that facilitates automated device management for IT departments. Hewlett Packard Enterprise OneView has a security vulnerability that stems from inadequate validation of data authenticity vulnerabilities in hybrid...

Hewlett Packard Enterprise Nimble Storage systems 安全漏洞

Hewlett Packard Enterprise Nimble Storage systems is a predictive flash storage technology from Hewlett Packard Enterprise that ensures that applications continue to run throughout hybrid cloud environments. A security vulnerability exists in Hewlett Packard Enterprise Nimble Storage systems that...

Hewlett Packard Enterprise Nimble Storage systems 安全漏洞

Hewlett Packard Enterprise Nimble Storage systems is a predictive flash storage technology from Hewlett Packard Enterprise that ensures that applications continue to run throughout hybrid cloud environments. A security vulnerability exists in Hewlett Packard Enterprise Nimble Storage systems, whi...

[SECURITY] Fedora 37 Update: android-tools-33.0.3p1-1.fc37

The Android Debug Bridge ADB is used to: - keep track of all Android devices and emulators instances connected to or running on a given host developer machine - implement various control commands e.g. "adb shell", "adb pull", etc. for the benefit of clients command-line users, or helper programs...

[SECURITY] Fedora 35 Update: android-tools-33.0.3p1-2.fc35

The Android Debug Bridge ADB is used to: - keep track of all Android devices and emulators instances connected to or running on a given host developer machine - implement various control commands e.g. "adb shell", "adb pull", etc. for the benefit of clients command-line users, or helper programs...

[SECURITY] Fedora 36 Update: android-tools-33.0.3p1-1.fc36

The Android Debug Bridge ADB is used to: - keep track of all Android devices and emulators instances connected to or running on a given host developer machine - implement various control commands e.g. "adb shell", "adb pull", etc. for the benefit of clients command-line users, or helper programs...

Upgraded Q -> M from #215 [1668468272191]

Judge has assessed an item in Issue 215 as M risk. The relevant finding follows: 7. No max fee is set on setFlashLoanFee function There is no max fee set. This allows a malicious owner to set a very high amount of flashloan fee , which allows the malicious admin to grief other users. He can also...

PT-2022-35140 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue concerns a fix for a sanity check on summary information in the f2fs component. The actual impact and potential for attack have not been proven yet. Recommendations: For versions...

Upgraded Q -> M from #403 [1668467487185]

Judge has assessed an item in Issue 403 as M risk. The relevant finding follows: 1. No upper limit check on flash loan fee No upper limit check on setFlashLoanFee. Although only admin can set this, human error can lead to higher percente swap, leading to excess swap and gas fee. Or admin can rug...

Upgraded Q -> M from #194 [1668467876517]

Judge has assessed an item in Issue 194 as M risk. The relevant finding follows: L-04 Should be a upper-bound on Flash-loan fee There are 1 instances of this issue: File : = Recommended Mitigation There should be a upper bound of Flash-loan fee define in contract so that owner can't able to set f...

Upgraded Q -> M from #70 [1668468349340]

Judge has assessed an item in Issue 70 as M risk. The relevant finding follows: Flash loan fee can be set to 100% Contract: Issue: In setFlashLoanFee function, If Admin has set flashloan fee to 100% then user taking X amount as flashloan has to pay a fee equal to X which does not make sense...

Beijing Missy Technology Co., Ltd. play whale app has a denial of service vulnerability

Play Whale app is a sound dating software. Ltd. play whale app there is a denial of service vulnerability, attackers can use the vulnerability caused by the program flashback...

Nokia ASIK AirScale 5G Common System Module 安全漏洞

The Nokia ASIK AirScale 5G Common System Module is a common system unit from Nokia, Finland. A security vulnerability exists in Nokia ASIK AirScale 5G Common System Module versions 474021A.101 and 474021A.102, which arises from its boot loader loading a public key used for firmware verification...

CVE-2022-37929

CVE-2022-37929 affects Hewlett Packard Enterprise Nimble Storage Hybrid Flash Arrays and Nimble Storage Secondary Flash Arrays. Connected documents identify the root cause as Improper Privilege Management. Public details describe potential impact to confidentiality and overall system security; ho...

CVE-2022-37929

Improper Privilege Management vulnerability in Hewlett Packard Enterprise Nimble Storage Hybrid Flash Arrays and Nimble Storage Secondary Flash Arrays...

PT-2022-24159 · Hewlett Packard · Hpe Nimble Storage Secondary Flash Arrays +1

Name of the Vulnerable Software and Affected Versions: HPE Nimble Storage Hybrid Flash Arrays affected versions not specified HPE Nimble Storage Secondary Flash Arrays affected versions not specified Description: The issue is related to Insufficient Verification of Data Authenticity. It affects...

PT-2022-24160 · Hewlett Packard · Hp Enterprise Nimble Storage Secondary Flash Arrays +1

Name of the Vulnerable Software and Affected Versions: Hewlett Packard Enterprise Nimble Storage Hybrid Flash Arrays affected versions not specified Hewlett Packard Enterprise Nimble Storage Secondary Flash Arrays affected versions not specified Description: The issue is related to Improper...

PT-2022-24162 · Hewlett Packard · Hpe Nimble Storage Secondary Flash Arrays +1

Name of the Vulnerable Software and Affected Versions: HPE Nimble Storage Hybrid Flash Arrays affected versions not specified HPE Nimble Storage Secondary Flash Arrays affected versions not specified Description: A security issue has been identified that could potentially allow local disclosure o...