CVE-2021-0576

In flv extractor, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-187236084...

Unauthorized Access Vulnerability in Flash Flood Monitoring and Early Warning Distribution System of Siltronic Software Ltd.

Siltronic Software Ltd. is a technology-based enterprise dedicated to the cause of disaster prevention and mitigation in China. An unauthorized access vulnerability exists in the Flash Flood Monitoring and Early Warning Distribution System of Siltronic Software Limited, which can be exploited by...

August 10, 2021—KB5005033 (OS Builds 19041.1165, 19042.1165, and 19043.1165)

None None...

August 10, 2021—KB5005030 (OS Build 17763.2114)

None None...

August 10, 2021—KB5005031 (OS Build 18363.1734)

None None...

August 10, 2021—KB5005043 (OS Build 14393.4583) - EXPIRED

None None...

August 10, 2021—KB5005076 (Monthly Rollup)

None None...

August 10, 2021—KB5005099 (Monthly Rollup)

None None...

August 10, 2021—KB5005094 (Security-only update)

None None...

SQL Injection Vulnerability in Flash Flood Monitoring and Early Warning Distribution Platform of Sichuang Technology Co.

Siltronic Ltd. is an information service provider for disaster reduction and profitability in China. A SQL injection vulnerability exists in the flash flood monitoring and early warning distribution platform of Siltronic, which can be exploited by attackers to obtain sensitive information from th...

July 29, 2021—KB5004296 (OS Builds 19041.1151, 19042.1151, and 19043.1151) Preview

None None...

July 29, 2021—KB5004293 (OS Build 18363.1714) Preview

None None...

July 29, 2021—KB5005393 (OS Build 14393.4532) Out-of-band

None None...

Adobe Flash Player Memory Use After Free

The vulnerability of the Adobe Flash Player Desktop Runtime, FlashPlayer for Google Chrome, as well as Adobe FlashPlayer for Microsoft Edge and Internet Explorer, is related to the use of memory after it is released. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...

Adobe Flash Player Code Execution

The vulnerability of the Adobe Flash Player is related to a data source validation error. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

CVE-2015-5119

Use-after-free vulnerability in the ByteArray class in the ActionScript 3 AS3 implementation in Adobe Flash Player 13.x through 13.0.0.296 and 14.x through 18.0.0.194 on Windows and OS X and 11.x through 11.2.202.468 on Linux allows remote attackers to execute arbitrary code or cause a denial of...

July 27, 2021—KB5005394 (OS Build 17763.2091) Out-of-band

None None...

Flash loan manipulation on getPoolShareWeight of Utils

Handle shw Vulnerability details Impact The getPoolShareWeight function returns a user's pool share weight by calculating how many SPARTAN the user's LP tokens account for. However, this approach is vulnerable to flash loan manipulation since an attacker can swap a large number of TOKEN to SPARTA...

[Pool] - Flash loan + Synth.realise allows anyone to extract value from LPs

Handle adelamo Vulnerability details Impact On Synth.sol, we have the method realise that checks if the LP value is higher than the Synth value. If confirmed, it will burn the premium LP. Using a flash loan, we can add liquidity to the pool, mint some LP tokens. Then, call realise using the pool...

[Pool] - Anyone can remove liquidity from Pools, allowing them to alter the price

Handle adelamo Vulnerability details Impact On the Pool.sol, the function removeForMember is public. Allowing anyone to call the method using an address of an LP in order to remove liquidity from the pools and return to the LP account. If we combine the ability to remove liquidity and being able ...