23809 matches found
The vulnerability of the Adobe Flash Player Desktop Runtime software, as well as FlashPlayer for Google Chrome, and Adobe FlashPlayer for Microsoft Edge and Internet Explorer, relates to the use of memory after it is freed. This allows a malicious actor to execute arbitrary code.
The vulnerability of the Adobe Flash Player Desktop Runtime, FlashPlayer for Google Chrome, as well as Adobe FlashPlayer for Microsoft Edge and Internet Explorer, is related to the use of memory after it is released. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...
The vulnerability of the Adobe Flash Player, related to a data source validation error, allows for the execution of arbitrary code.
The vulnerability of the Adobe Flash Player is related to a data source validation error. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
CVE-2015-5119
Use-after-free vulnerability in the ByteArray class in the ActionScript 3 AS3 implementation in Adobe Flash Player 13.x through 13.0.0.296 and 14.x through 18.0.0.194 on Windows and OS X and 11.x through 11.2.202.468 on Linux allows remote attackers to execute arbitrary code or cause a denial of...
July 27, 2021—KB5005394 (OS Build 17763.2091) Out-of-band
None None...
Flash loan manipulation on getPoolShareWeight of Utils
Handle shw Vulnerability details Impact The getPoolShareWeight function returns a user's pool share weight by calculating how many SPARTAN the user's LP tokens account for. However, this approach is vulnerable to flash loan manipulation since an attacker can swap a large number of TOKEN to SPARTA...
[Pool] - Flash loan + Synth.realise allows anyone to extract value from LPs
Handle adelamo Vulnerability details Impact On Synth.sol, we have the method realise that checks if the LP value is higher than the Synth value. If confirmed, it will burn the premium LP. Using a flash loan, we can add liquidity to the pool, mint some LP tokens. Then, call realise using the pool...
[Pool] - Anyone can remove liquidity from Pools, allowing them to alter the price
Handle adelamo Vulnerability details Impact On the Pool.sol, the function removeForMember is public. Allowing anyone to call the method using an address of an LP in order to remove liquidity from the pools and return to the LP account. If we combine the ability to remove liquidity and being able ...
July 20, 2021—KB5004308 (OS Build 17763.2090) Preview
None None...
CVE-2021-3453
Some Lenovo Notebook, ThinkPad, and Lenovo Desktop systems have BIOS modules unprotected by Intel Boot Guard that could allow an attacker with physical access the ability to write to the SPI flash storage...
Code injection
Some Lenovo Notebook, ThinkPad, and Lenovo Desktop systems have BIOS modules unprotected by Intel Boot Guard that could allow an attacker with physical access the ability to write to the SPI flash storage...
CVE-2021-3453
CVE-2021-3453 affects Lenovo Notebook, ThinkPad, and Lenovo Desktop BIOS modules that are not protected by Intel Boot Guard, allowing a physically proximate attacker to write to the SPI flash storage. The issue stems from BIOS modules being unprotected by Boot Guard, enabling potential unauthoriz...
CVE-2021-3453
Some Lenovo Notebook, ThinkPad, and Lenovo Desktop systems have BIOS modules unprotected by Intel Boot Guard that could allow an attacker with physical access the ability to write to the SPI flash storage...
Logic Flaw Vulnerability in Flash Flood Monitoring and Early Warning System of Siltronic Ltd.
Siltronic is committed to the cause of disaster reduction and profitability, providing the government with comprehensive solutions for disaster reduction and profitability informatization; providing enterprises with information and application services for disaster reduction and profitability; an...
July 13, 2021—KB5004245 (OS Build 18363.1679)
None None...
July 13, 2021—KB5004302 (Security-only update)
None None...
July 13, 2021—KB5004285 (Security-only update)
None None...
July 13, 2021—KB5004238 (OS Build 14393.4530) - EXPIRED
None None...
July 13, 2021—KB5004298 (Monthly Rollup)
None None...