CVE-2022-47547

GossipSub 1.1, as used for Ethereum 2.0, allows a peer to maintain a positive score and thus not be pruned from the network even though it continuously misbehaves by never forwarding topic messages...

PT-2022-28072 · Gossipsub · Gossipsub

Name of the Vulnerable Software and Affected Versions: GossipSub version 1.1 Description: The issue allows a peer to maintain a positive score and remain in the network despite continuously misbehaving by not forwarding topic messages. This affects GossipSub 1.1 as used for Ethereum 2.0...

GossipSub 安全漏洞

Gossipsub is an extensible benchmark pubsub protocol based on randomized topic grids and Gossip. GossipSub version 1.1 suffers from a security vulnerability that stems from allowing a peer to maintain a positive score even though it continually misbehaves by never forwarding topic messages...

UBUNTU-CVE-2021-3570

A flaw was found in the ptp4l program of the linuxptp package. A missing length check when forwarding a PTP message between ports allows a remote attacker to cause an information leak, crash, or potentially remote code execution. The highest threat from this vulnerability is to data confidentiali...

PT-2021-3595 · Linuxptp +8 · Linuxptp +8

Name of the Vulnerable Software and Affected Versions: linuxptp versions before 3.1.1 linuxptp versions before 2.0.1 linuxptp versions before 1.9.3 linuxptp versions before 1.8.1 linuxptp versions before 1.7.1 linuxptp versions before 1.6.1 linuxptp versions before 1.5.1 Description: A flaw was...

Security update for Mozilla Thunderbird (moderate)

This update for Mozilla Thunderbird to version 52.9.0 fixes multiple issues. Security issues fixed, inherited from the Mozilla common code base MFSA 2018-16, bsc1098998: - CVE-2018-12359: Buffer overflow using computed size of canvas element - CVE-2018-12360: Use-after-free when using focus -...

Atmail Webmail 7.2 - Multiple Vulnerabilities

No description provided by source. Title: Atmail Webmail =7.2 - Multiple XSS & FPD Date: 01.27.2014 Vendor: atmail.com Version: =7.2 Latest ATM, tested also on 7.1.1 Authors: Smash & Brag / smashatdevilteam.pl PoC: poczta.pl / demo.atmail.com 1. Cross Site Scripting a GET - viewmessageTabNumber...

Scriptable plugin execution in SeaMonkey mail — Mozilla

Security researcher Georgi Guninski reported that scriptable plugin content, such as Flash objects, could be loaded and executed in SeaMonkey mail messages by embedding the content in an iframe inside the message. If a user were to reply to or forward such a message, malicious JavaScript embedded...