Lucene search
K

9 matches found

Zero Day Initiative
Zero Day Initiative
added 2026/03/03 12:0 a.m.2 views

Trend Micro Apex Central Hub Server Server-Side Request Forgery Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Trend Micro Apex Central. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of hub server URLs. By providing a crafted URL, an attacker ca...

4.4CVSS5.8AI score
Exploits0References1
OSV
OSV
added 2024/09/27 1:30 a.m.8 views

MGASA-2024-0317 Updated python3 packages fix security vulnerabilities

A defect was discovered in the Python “ssl” module where there is a memory race condition with the ssl.SSLContext methods “certstorestats” and “getcacerts”. The race condition can be triggered if the methods are called at the same time as certificates are loaded into the SSLContext, such as durin...

8.7CVSS6.7AI score0.03014EPSS
Exploits4References9
CNNVD
CNNVD
added 2023/06/06 12:0 a.m.2 views

Qualcomm Chipsets 资源管理错误漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from memory corruption due to a double release in the car when passing the wrong HLOS address for one of the lists to be mapped...

8.4CVSS7.3AI score0.00071EPSS
Exploits0References2
NVD
NVD
added 2023/04/17 10:15 p.m.12 views

CVE-2023-30543

@web3-react is a framework for building Ethereum Apps . In affected versions the chainId may be outdated if the user changes chains as part of the connection flow. This means that the value of chainId returned by useWeb3React may be incorrect. In an application, this means that any data derived...

5.7CVSS5.2AI score0.00151EPSS
Exploits0References2
Code423n4
Code423n4
added 2022/11/07 12:0 a.m.9 views

L2ETHBridge.l2TokenAddress returns CONVENTIONAL_ETH_ADDRESS instead of ETH_TOKEN_SYSTEM_CONTRACT_ADDRESS

Lines of code Vulnerability details Impact In the L2ETHBridge contract, both the withdraw and l2TokenAddress functions use CONVENTIONALETHADDRESS as the address of the L2ETH. However, L2ETH is actually an L2StandardToken contract at the ETHTOKENSYSTEMCONTRACTADDRESS address. If the user wants to...

6.9AI score
Exploits0
Cvelist
Cvelist
added 2020/12/15 12:48 a.m.13 views

CVE-2020-35470

Envoy before 1.16.1 logs an incorrect downstream address because it considers only the directly connected peer, not the information in the proxy protocol header. This affects situations with tcp-proxy as the network filter not HTTP filters...

8.6AI score0.00781EPSS
Exploits0References3
Citrix
Citrix
added 2018/08/04 12:0 a.m.3 views

PVS 7.15.3 The target device detecting the wrong Mac Address

While booting the Target Device, it shows the wrong mac address as 656565656565...

7.1AI score
Exploits0
OpenVAS
OpenVAS
added 2013/11/21 12:0 a.m.28 views

RedHat Update for RDMA stack RHSA-2013:1661-02

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.3CVSS6.5AI score0.00396EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2013/11/21 12:0 a.m.17 views

RedHat Update for RDMA stack RHSA-2013:1661-02

Check for the Version of RDMA stack OpenVAS Vulnerability Test RedHat Update for RDMA stack RHSA-2013:1661-02 Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

6.3CVSS6.4AI score0.00396EPSS
Exploits1References2
Rows per page
Query Builder