[SECURITY] Fedora 36 Update: android-tools-33.0.3p1-1.fc36

The Android Debug Bridge ADB is used to: - keep track of all Android devices and emulators instances connected to or running on a given host developer machine - implement various control commands e.g. "adb shell", "adb pull", etc. for the benefit of clients command-line users, or helper programs...

PT-2022-35140 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue concerns a fix for a sanity check on summary information in the f2fs component. The actual impact and potential for attack have not been proven yet. Recommendations: For versions...

Upgraded Q -> M from #215 [1668468272191]

Judge has assessed an item in Issue 215 as M risk. The relevant finding follows: 7. No max fee is set on setFlashLoanFee function There is no max fee set. This allows a malicious owner to set a very high amount of flashloan fee , which allows the malicious admin to grief other users. He can also...

Upgraded Q -> M from #194 [1668467876517]

Judge has assessed an item in Issue 194 as M risk. The relevant finding follows: L-04 Should be a upper-bound on Flash-loan fee There are 1 instances of this issue: File : = Recommended Mitigation There should be a upper bound of Flash-loan fee define in contract so that owner can't able to set f...

Upgraded Q -> M from #403 [1668467487185]

Judge has assessed an item in Issue 403 as M risk. The relevant finding follows: 1. No upper limit check on flash loan fee No upper limit check on setFlashLoanFee. Although only admin can set this, human error can lead to higher percente swap, leading to excess swap and gas fee. Or admin can rug...

Upgraded Q -> M from #70 [1668468349340]

Judge has assessed an item in Issue 70 as M risk. The relevant finding follows: Flash loan fee can be set to 100% Contract: Issue: In setFlashLoanFee function, If Admin has set flashloan fee to 100% then user taking X amount as flashloan has to pay a fee equal to X which does not make sense...

Beijing Missy Technology Co., Ltd. play whale app has a denial of service vulnerability

Play Whale app is a sound dating software. Ltd. play whale app there is a denial of service vulnerability, attackers can use the vulnerability caused by the program flashback...

Nokia ASIK AirScale 5G Common System Module 安全漏洞

The Nokia ASIK AirScale 5G Common System Module is a common system unit from Nokia, Finland. A security vulnerability exists in Nokia ASIK AirScale 5G Common System Module versions 474021A.101 and 474021A.102, which arises from its boot loader loading a public key used for firmware verification...

CVE-2022-37929

Improper Privilege Management vulnerability in Hewlett Packard Enterprise Nimble Storage Hybrid Flash Arrays and Nimble Storage Secondary Flash Arrays...

CVE-2022-37929

CVE-2022-37929 affects Hewlett Packard Enterprise Nimble Storage Hybrid Flash Arrays and Nimble Storage Secondary Flash Arrays. Connected documents identify the root cause as Improper Privilege Management. Public details describe potential impact to confidentiality and overall system security; ho...

CVE-2022-37929: Improper Privilege Management

Improper Privilege Management vulnerability in Hewlett Packard Enterprise Nimble Storage Hybrid Flash Arrays and Nimble Storage Secondary Flash Arrays...

CVE-2022-37930: Exposure of Sensitive Information to an Unauthorized Actor

A security vulnerability has been identified in HPE Nimble Storage Hybrid Flash Arrays and HPE Nimble Storage Secondary Flash Arrays which could potentially allow local disclosure of sensitive information...

PT-2022-24162 · Hewlett Packard · Hpe Nimble Storage Secondary Flash Arrays +1

Name of the Vulnerable Software and Affected Versions: HPE Nimble Storage Hybrid Flash Arrays affected versions not specified HPE Nimble Storage Secondary Flash Arrays affected versions not specified Description: A security issue has been identified that could potentially allow local disclosure o...

PT-2022-24159 · Hewlett Packard · Hpe Nimble Storage Secondary Flash Arrays +1

Name of the Vulnerable Software and Affected Versions: HPE Nimble Storage Hybrid Flash Arrays affected versions not specified HPE Nimble Storage Secondary Flash Arrays affected versions not specified Description: The issue is related to Insufficient Verification of Data Authenticity. It affects...

CVE-2022-37928: Insufficient Verification of Data Authenticity

Insufficient Verification of Data Authenticity vulnerability in Hewlett Packard Enterprise HPE Nimble Storage Hybrid Flash Arrays and Nimble Storage Secondary Flash Arrays...

PT-2022-24160 · Hewlett Packard · Hp Enterprise Nimble Storage Secondary Flash Arrays +1

Name of the Vulnerable Software and Affected Versions: Hewlett Packard Enterprise Nimble Storage Hybrid Flash Arrays affected versions not specified Hewlett Packard Enterprise Nimble Storage Secondary Flash Arrays affected versions not specified Description: The issue is related to Improper...

CLSA-2022-1667414297 Fix CVE(s): CVE-2021-44879

CVE-2021-44879 - ELSCVE-3342 f2fs: fix to do sanity check on inode type during garbage collection...

CVE-2022-24936

Out-of-Bounds error in GBL parser in Silicon Labs Gecko Bootloader version 4.0.1 and earlier allows attacker to overwrite flash Sign key and OTA decryption key via malicious bootloader upgrade...

CVE-2022-24936

Out-of-Bounds error in GBL parser in Silicon Labs Gecko Bootloader version 4.0.1 and earlier allows attacker to overwrite flash Sign key and OTA decryption key via malicious bootloader upgrade...

Design/Logic Flaw

Out-of-Bounds error in GBL parser in Silicon Labs Gecko Bootloader version 4.0.1 and earlier allows attacker to overwrite flash Sign key and OTA decryption key via malicious bootloader upgrade...