13 matches found
GHSA-VG88-3V92-RJX2 Vyper: Return inside for loop more than 1 level deep
VVE-2020-0002 Earlier today, we received a responsible disclosure of a potential issue from @michwill developer of @curvefi for Vyper users who use return statements inside for loops of nested internal calls. Returning inside a for loop causes an invalid jump dest, reverting the transaction...
io.github.coffee330501:internal-call (>=1.0, <=1.1.0), org.apache.ranger:embeddedwebserver (2.4.0) +2 more potentially affected by CVE-2026-43512 via org.apache.tomcat.embed:tomcat-embed-core (8.5.86)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.5.86 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - io.github.coffee330501:internal-call =1.0, =1.1.0 -...
io.github.coffee330501:internal-call (>=1.0, <=1.1.0), org.apache.ranger:embeddedwebserver (2.4.0) +2 more potentially affected by CVE-2026-43514 via org.apache.tomcat.embed:tomcat-embed-core (8.5.86)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.5.86 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - io.github.coffee330501:internal-call =1.0, =1.1.0 -...
io.github.coffee330501:internal-call (>=1.0, <=1.1.0), org.apache.ranger:embeddedwebserver (2.4.0) +2 more potentially affected by CVE-2026-41284 via org.apache.tomcat.embed:tomcat-embed-core (8.5.86)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.5.86 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - io.github.coffee330501:internal-call =1.0, =1.1.0 -...
io.github.coffee330501:internal-call (>=1.0, <=1.1.0), org.apache.ranger:embeddedwebserver (2.4.0) +2 more potentially affected by CVE-2026-42498 via org.apache.tomcat.embed:tomcat-embed-core (8.5.86)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.5.86 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - io.github.coffee330501:internal-call =1.0, =1.1.0 -...
io.github.coffee330501:internal-call (>=1.0, <=1.1.0), org.apache.ranger:embeddedwebserver (2.4.0) +2 more potentially affected by CVE-2026-43515 via org.apache.tomcat.embed:tomcat-embed-core (8.5.86)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.5.86 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - io.github.coffee330501:internal-call =1.0, =1.1.0 -...
io.github.coffee330501:internal-call (>=1.0, <=1.1.0), org.apache.ranger:embeddedwebserver (2.4.0) +2 more potentially affected by CVE-2026-43513 via org.apache.tomcat.embed:tomcat-embed-core (8.5.86)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.5.86 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - io.github.coffee330501:internal-call =1.0, =1.1.0 -...
com.github.rjolly:flying-saucer (>=9.1.20, <=9.1.25), com.github.wpyuan:dc-print (>=0.1.1, <=0.4.0) +51 more potentially affected by CVE-2024-34447 via org.bouncycastle:bcprov-jdk14 (>=1.61, <=1.77)
org.bouncycastle:bcprov-jdk14 MAVEN version =1.61, =9.1.20, =0.1.1, =1.0.4, =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.1.0, =2.0.0-rc1, =2.0.0, =2.0.0-rc1, =2.0.0, =2.0.0-rc1, =2.0, =2.1 and more Source cves: CVE-2024-34447 Source advisory: OSV:GHSA-4H8F-2WVX-GG5W...
Wrapping ether with Ocean.doMultipleInteractions() reverts
Lines of code Vulnerability details Summary Wrapping ether with doMultipleInteractions reverts. This is the case if one or more of the interactions is handling ether. If we look at the internal helper function, doMultipleInteractions, it includes the following: if msg.value != 0...
Design/Logic Flaw
Vyper is a Pythonic Smart Contract Language. For the following probably non-exhaustive list of expressions, the compiler evaluates the arguments from right to left instead of left to right. unsafeadd, unsafesub, unsafemul, unsafediv, powmod256, |, &, ^ bitwise operators, bitwiseor deprecated,...
AUVESY Versiondog Input Validation Error Vulnerability
AUVESY Versiondog, an automated production data and change management software solution from AUVESY Germany, is vulnerable to an input validation error that stems from the fact that the affected product's operating system service does not validate any given parameter, which could be exploited by ...
CVE-2020-28361
Kamailio before 5.4.0, as used in Sip Express Router SER in Sippy Softswitch 4.5 through 5.2 and other products, allows a bypass of a header-removal protection mechanism via whitespace characters. This occurs in the removehf function in the Kamailio textops module. Particular use of removehf in...
Design/Logic Flaw
Kamailio before 5.4.0, as used in Sip Express Router SER in Sippy Softswitch 4.5 through 5.2 and other products, allows a bypass of a header-removal protection mechanism via whitespace characters. This occurs in the removehf function in the Kamailio textops module. Particular use of removehf in...