CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

224 matches found

CVE•added 2022/07/07 6:0 p.m.•78 views

CVE-2022-31121

Hyperledger Fabric vulnerability CVE-2022-31121 affects Fabric's orderer component. In affected versions, if a consensus client sends a malformed consensus request to an orderer, the orderer may crash. A fix was added in commit 0f1835949 that validates missing consensus messages and returns an er...

7.5CVSS7.4AI score0.01983EPSS

SaveExploits0References4Affected Software1

CNNVD•added 2022/07/07 12:0 a.m.•25 views

Hyperledger Fabric 输入验证错误漏洞

Hyperledger Fabric is an enterprise licensed distributed ledger framework. It is used to develop solutions and applications. Hyperledger Fabric suffers from an input validation error vulnerability that stems from incorrect validation of inputs in a consensus request, which could be exploited by a...

7.5CVSS7.2AI score0.01983EPSS

SaveExploits0References5

Hacker One•added 2022/06/17 8:51 a.m.•77 views

Hyperledger: Remote denial of service in HyperLedger Fabric

This issue was caused by a missing check of nil. An orderer to orderer consensus message that contains an empty inner message crashes the node because it attempts to figure out its type and the mere action of determining the type of a nil pointer, causes a panic. Thank you to Haosheng Wang of OPP...

5CVSS1.1AI score0.01983EPSS

SaveExploits0

OSV•added 2022/05/25 7:23 p.m.•38 views

GHSA-VJJ6-5M9F-WQJW NULL Pointer Dereference in HyperLedger Fabric

A vulnerability has been detected in HyperLedger Fabric v1.4.0, v2.0.0, v2.1.0. This bug can be leveraged by constructing a message whose payload is nil and sending this message with the method 'forwardToLeader'. This bug has been admitted and fixed by the developers of Fabric. If leveraged, any...

7.5CVSS7.5AI score0.01293EPSS

SaveExploits1References5

Github Security Blog•added 2022/05/25 7:23 p.m.•27 views

NULL Pointer Dereference in HyperLedger Fabric

7.5CVSS3AI score0.01293EPSS

SaveExploits1References5Affected Software1

Hacker One•added 2022/04/23 4:46 p.m.•16 views

Hyperledger: Unauthorized packages modification or secrets exfiltration via GitHub actions

Thank you to @dustywormwood for working closely with the Iroha team to fix this issue. You can learn more about this vulnerability type at https://github.com/nikitastupin/pwnhub. Thanks to the Hyperledger team for thorough remediation and clear communication!...

2AI score

SaveExploits0

vulnersOsv•added 2022/01/13 4:9 p.m.•6 views

@biconomy/hyphen-contracts (=1.0.4), @bobanetwork/contracts (=0.0.2) +17 more potentially affected by unknown CVE via @openzeppelin/contracts-upgradeable (>=4.3.0 <=4.4.1)

@openzeppelin/contracts-upgradeable NPM version =4.3.0, =0.0.1, =0.5.0, =3.4.0, =1.5.0, =1.4.0, =1.5.0, =1.4.0, =1.0.0-main.334593a7.46, =2.4.0, =2.0.0, =1.0.0, =2.0.2, =3.0.0-beta, =3.0.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-M6W8-FQ7V-PH4M...

5.8AI score

SaveExploits0

IBM Security Bulletins•added 2022/01/07 6:0 p.m.•71 views

Security Bulletin: IBM MQ Blockchain bridge dependencies are vulnerable to issues in Apache Log4j (CVE-2021-45105 & CVE-2021-44832)

Summary A Denial of Service issue was identified within the Log4j fix for CVE-2021-45046 that is used by Fabric Gateway to provide logging functionality. Fabric Gateway is used by the IBM MQ blockchain bridge component of IBM MQ to provide connection capability between IBM MQ queue managers and...

10CVSS0.3AI score0.99999EPSS

SaveExploits365Affected Software1

IBM Security Bulletins•added 2021/12/20 11:51 a.m.•158 views

Security Bulletin: IBM MQ Blockchain bridge dependencies are vulnerable to an issue in Apache Log4j (CVE-2021-45046)

Summary A Remote Code Execution issue was identified within the Log4j fix for CVE-2021-44228 that is used by Fabric Gateway to provide logging functionality. Fabric Gateway is used by the IBM MQ blockchain bridge component of IBM MQ to provide connection capability between IBM MQ queue managers a...

10CVSS0.7AI score0.99999EPSS

SaveExploits361Affected Software1

OSV•added 2021/12/03 8:52 p.m.•21 views

GHSA-J96P-R523-8R3W HTTP Request Smuggling in github.com/hyperledger/fabric

A vulnerability has been detected in HyperLedger Fabric v1.4.0, v2.0.0, v2.0.1, v2.3.0. It can easily break down as many orderers as the attacker wants. This bug can be leveraged by constructing a message whose header is invalid to the interface Order. This bug has been admitted and fixed by the...

7.5CVSS7.4AI score0.01091EPSS

SaveExploits0References5

Github Security Blog•added 2021/12/03 8:52 p.m.•27 views

HTTP Request Smuggling in github.com/hyperledger/fabric

7.5CVSS1.8AI score0.01091EPSS

SaveExploits0References5Affected Software1

ATTACKERKB•added 2021/11/18 4:15 p.m.•4 views

CVE-2021-43667

7.5CVSS6.9AI score0.01293EPSS

SaveExploits1References3

OSV•added 2021/11/18 4:15 p.m.•12 views

CVE-2021-43667

7.5CVSS6.8AI score

SaveExploits0References2

NVD•added 2021/11/18 4:15 p.m.•38 views

CVE-2021-43667

7.5CVSS0.01293EPSS

SaveExploits1References2

ATTACKERKB•added 2021/11/18 4:15 p.m.•4 views

CVE-2021-43669

7.5CVSS6.9AI score0.01091EPSS

SaveExploits0References3

NVD•added 2021/11/18 4:15 p.m.•26 views

CVE-2021-43669

7.5CVSS0.01091EPSS

SaveExploits0References2

OSV•added 2021/11/18 4:15 p.m.•20 views

CVE-2021-43669

7.5CVSS6.7AI score

SaveExploits0References2

Prion•added 2021/11/18 4:15 p.m.•20 views

Design/Logic Flaw

5CVSS7.5AI score0.01293EPSS

SaveExploits1References2Affected Software1

Prion•added 2021/11/18 4:15 p.m.•25 views

Design/Logic Flaw

5CVSS7.4AI score0.01091EPSS

SaveExploits0References2Affected Software1

Cvelist•added 2021/11/18 3:5 p.m.•25 views

CVE-2021-43669

7.6AI score0.01091EPSS

SaveExploits0References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by