23890 matches found
Hewlett Packard Enterprise OneView 数据伪造问题漏洞
Hewlett Packard Enterprise OneView is a software from Hewlett Packard Enterprise that facilitates automated device management for IT departments. Hewlett Packard Enterprise OneView has a security vulnerability that stems from inadequate validation of data authenticity vulnerabilities in hybrid...
Hewlett Packard Enterprise Nimble Storage systems 安全漏洞
Hewlett Packard Enterprise Nimble Storage systems is a predictive flash storage technology from Hewlett Packard Enterprise that ensures that applications continue to run throughout hybrid cloud environments. A security vulnerability exists in Hewlett Packard Enterprise Nimble Storage systems, whi...
[SECURITY] Fedora 37 Update: android-tools-33.0.3p1-1.fc37
The Android Debug Bridge ADB is used to: - keep track of all Android devices and emulators instances connected to or running on a given host developer machine - implement various control commands e.g. "adb shell", "adb pull", etc. for the benefit of clients command-line users, or helper programs...
[SECURITY] Fedora 35 Update: android-tools-33.0.3p1-2.fc35
The Android Debug Bridge ADB is used to: - keep track of all Android devices and emulators instances connected to or running on a given host developer machine - implement various control commands e.g. "adb shell", "adb pull", etc. for the benefit of clients command-line users, or helper programs...
[SECURITY] Fedora 36 Update: android-tools-33.0.3p1-1.fc36
The Android Debug Bridge ADB is used to: - keep track of all Android devices and emulators instances connected to or running on a given host developer machine - implement various control commands e.g. "adb shell", "adb pull", etc. for the benefit of clients command-line users, or helper programs...
Upgraded Q -> M from #215 [1668468272191]
Judge has assessed an item in Issue 215 as M risk. The relevant finding follows: 7. No max fee is set on setFlashLoanFee function There is no max fee set. This allows a malicious owner to set a very high amount of flashloan fee , which allows the malicious admin to grief other users. He can also...
PT-2022-35140 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue concerns a fix for a sanity check on summary information in the f2fs component. The actual impact and potential for attack have not been proven yet. Recommendations: For versions...
Upgraded Q -> M from #403 [1668467487185]
Judge has assessed an item in Issue 403 as M risk. The relevant finding follows: 1. No upper limit check on flash loan fee No upper limit check on setFlashLoanFee. Although only admin can set this, human error can lead to higher percente swap, leading to excess swap and gas fee. Or admin can rug...
Upgraded Q -> M from #70 [1668468349340]
Judge has assessed an item in Issue 70 as M risk. The relevant finding follows: Flash loan fee can be set to 100% Contract: Issue: In setFlashLoanFee function, If Admin has set flashloan fee to 100% then user taking X amount as flashloan has to pay a fee equal to X which does not make sense...
Upgraded Q -> M from #194 [1668467876517]
Judge has assessed an item in Issue 194 as M risk. The relevant finding follows: L-04 Should be a upper-bound on Flash-loan fee There are 1 instances of this issue: File : = Recommended Mitigation There should be a upper bound of Flash-loan fee define in contract so that owner can't able to set f...
Beijing Missy Technology Co., Ltd. play whale app has a denial of service vulnerability
Play Whale app is a sound dating software. Ltd. play whale app there is a denial of service vulnerability, attackers can use the vulnerability caused by the program flashback...
Nokia ASIK AirScale 5G Common System Module 安全漏洞
The Nokia ASIK AirScale 5G Common System Module is a common system unit from Nokia, Finland. A security vulnerability exists in Nokia ASIK AirScale 5G Common System Module versions 474021A.101 and 474021A.102, which arises from its boot loader loading a public key used for firmware verification...
CVE-2022-37929
Improper Privilege Management vulnerability in Hewlett Packard Enterprise Nimble Storage Hybrid Flash Arrays and Nimble Storage Secondary Flash Arrays...
CVE-2022-37929
CVE-2022-37929 affects Hewlett Packard Enterprise Nimble Storage Hybrid Flash Arrays and Nimble Storage Secondary Flash Arrays. Connected documents identify the root cause as Improper Privilege Management. Public details describe potential impact to confidentiality and overall system security; ho...
PT-2022-24159 · Hewlett Packard · Hpe Nimble Storage Secondary Flash Arrays +1
Name of the Vulnerable Software and Affected Versions: HPE Nimble Storage Hybrid Flash Arrays affected versions not specified HPE Nimble Storage Secondary Flash Arrays affected versions not specified Description: The issue is related to Insufficient Verification of Data Authenticity. It affects...
PT-2022-24160 · Hewlett Packard · Hp Enterprise Nimble Storage Secondary Flash Arrays +1
Name of the Vulnerable Software and Affected Versions: Hewlett Packard Enterprise Nimble Storage Hybrid Flash Arrays affected versions not specified Hewlett Packard Enterprise Nimble Storage Secondary Flash Arrays affected versions not specified Description: The issue is related to Improper...
PT-2022-24162 · Hewlett Packard · Hpe Nimble Storage Secondary Flash Arrays +1
Name of the Vulnerable Software and Affected Versions: HPE Nimble Storage Hybrid Flash Arrays affected versions not specified HPE Nimble Storage Secondary Flash Arrays affected versions not specified Description: A security issue has been identified that could potentially allow local disclosure o...
CLSA-2022-1667414297 Fix CVE(s): CVE-2021-44879
CVE-2021-44879 - ELSCVE-3342 f2fs: fix to do sanity check on inode type during garbage collection...
CVE-2022-24936
Out-of-Bounds error in GBL parser in Silicon Labs Gecko Bootloader version 4.0.1 and earlier allows attacker to overwrite flash Sign key and OTA decryption key via malicious bootloader upgrade...
