26461 matches found
Lepin EP-KP001 KP001_V19 Authentication Bypass
Advisory ID: SYSS-2022-024 Product: EP-KP001 Manufacturer: Lepin Affected Versions: KP001V19 Tested Versions: KP001V19 Vulnerability Type: Violation of Secure Design Principles CWE-657 Risk Level: High Solution Status: Open Manufacturer Notification: 2022-04-12 Solution Date: - Public Disclosure:...
Yield can be lost due to not specifying limit when transferring WETH to Aura
Lines of code Vulnerability details Impact In the harvest function, when the contract swaps WETH to Aura, limit is set to 0 allowing an attacker to front run the transaction and cause substantional loss of yield. swapSingleSwap singleSwap, FundManagement funds, uint256 limit, uint256 deadline...
Loss of yield can occur due to not specifying minAmountsOut when exiting BAL/ETH pool
Lines of code Vulnerability details Impact When exiting the BAL/ETH pool, due to not specifying anything for minAmountsOut an attacker can frontrun the transaction and cause a large change in price in the pool. This in turn leads to a large impermanent loss which is realised when the strategy bur...
Adobe Animate Out-of-Bounds Write Vulnerability (CNVD-2022-50234)
Adobe Animate is a set of Flash animation software from the American company Audobee Adobe. Adobe Animate suffers from an out-of-bounds write vulnerability. An attacker could use this vulnerability to execute arbitrary code in the context of the current user...
CVE-2022-29948
Due to an insecure design, the Lepin EP-KP001 flash drive through KP001V19 is vulnerable to an authentication bypass attack that enables an attacker to gain access to the stored encrypted data. Normally, the encrypted disk partition with this data is unlocked by entering the correct passcode 6 to...
CVE-2022-29948
Due to an insecure design, the Lepin EP-KP001 flash drive through KP001V19 is vulnerable to an authentication bypass attack that enables an attacker to gain access to the stored encrypted data. Normally, the encrypted disk partition with this data is unlocked by entering the correct passcode 6 to...
Swftools Buffer Overflow Vulnerability (CNVD-2022-62209)
Swftools is a set of utilities for working with Adobe Flash files SWF files. swftools 2020-12-22 and earlier versions of swfdump.c have a heap buffer overflow vulnerability in the handleEditText function. An attacker could exploit this vulnerability to cause code execution...
Swftools out-of-bounds write vulnerability (CNVD-2022-62215)
Swftools is a set of utilities for working with Adobe Flash files SWF files. An out-of-bounds write vulnerability exists in Swftools 2020-12-22 and prior versions, which stems from a heap buffer overflow in the function swfGetD64 located in rfxswf.c. The vulnerability is caused by a heap buffer...
Swftools out-of-bounds write vulnerability (CNVD-2022-62213)
Swftools is a set of utilities for working with Adobe Flash files SWF files. An out-of-bounds write vulnerability exists in Swftools 2020-12-22 and prior versions, which stems from a heap buffer overflow in function swfFontExtractDefineTextCallback located in swftext.c. The vulnerability is cause...
Swftools missing resource release vulnerability
Swftools is a set of utilities for working with Adobe Flash files SWF files. swftools 2020-12-22 and prior versions contain a missing resource release vulnerability that stems from the use of swfdump which can lead to an application memory leak. An attacker could exploit this vulnerability to...
Swftools out-of-bounds write vulnerability (CNVD-2022-62218)
Swftools is a set of utilities for working with Adobe Flash files SWF files. An out-of-bounds write vulnerability exists in Swftools 2020-12-22 and prior versions, which stems from a heap buffer overflow in the function swfGetBits located in rfxswf.c. The vulnerability is caused by a heap buffer...
Swftools null pointer dereference vulnerability (CNVD-2022-62212)
Swftools is a set of utilities for working with Adobe Flash files SWF files. A null pointer dereference vulnerability exists in Swftools 2020-12-22 and prior versions, which stems from the presence of a NULL pointer dereference in the function swfGetBits located in rfxswf.c. An attacker could...
CVE-2017-20025
A vulnerability was found in Solare Solar-Log 2.8.4-56/3.5.2-85. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Flash Memory. The manipulation leads to privilege escalation. The attack can be launched remotely. Upgrading to version...
CVE-2017-20025
A vulnerability was found in Solare Solar-Log 2.8.4-56/3.5.2-85. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Flash Memory. The manipulation leads to privilege escalation. The attack can be launched remotely. Upgrading to version...
CVE-2017-20025 Solare Solar-Log Flash Memory privileges management
A vulnerability was found in Solare Solar-Log 2.8.4-56/3.5.2-85. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Flash Memory. The manipulation leads to privilege escalation. The attack can be launched remotely. Upgrading to version...
CVE-2017-20025 Solare Solar-Log Flash Memory privileges management
A vulnerability was found in Solare Solar-Log 2.8.4-56/3.5.2-85. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Flash Memory. The manipulation leads to privilege escalation. The attack can be launched remotely. Upgrading to version...
CVE-2017-20025
CVE-2017-20025 affects Solar-Log appliances: Solare Solar-Log versions 2.8.4-56 and 3.5.2-85. An issue with the Flash Memory component allows manipulation that leads to privilege escalation, with a remote attack feasible. The advertised fix is to upgrade to version 3.5.3-86. Public details in con...
CVE-2017-20025: Improper Privilege Management
A vulnerability was found in Solare Solar-Log 2.8.4-56/3.5.2-85. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Flash Memory. The manipulation leads to privilege escalation. The attack can be launched remotely. Upgrading to version...
PT-2022-7898
Name of the Vulnerable Software and Affected Versions Solare Solar-Log versions 2.8.4-56 through 3.5.2-85 Description A critical issue has been found in the Flash Memory component, allowing for privilege escalation through remote attacks. The estimated number of potentially affected devices...
