PYSEC-2022-43143

OpenZeppelin Contracts for Cairo is a library for contract development written in Cairo for StarkNet, a decentralized ZK Rollup. Version 0.2.0 is vulnerable to an error that renders account contracts unusable on live networks. This issue affects all accounts vanilla and ethereum flavors in the...

Design/Logic Flaw

OpenZeppelin Contracts for Cairo is a library for contract development written in Cairo for StarkNet, a decentralized ZK Rollup. Version 0.2.0 is vulnerable to an error that renders account contracts unusable on live networks. This issue affects all accounts vanilla and ethereum flavors in the...

CVE-2022-31153 OpenZeppelin Contracts for Cairo account cannot process transactions on Goerli

OpenZeppelin Contracts for Cairo is a library for contract development written in Cairo for StarkNet, a decentralized ZK Rollup. Version 0.2.0 is vulnerable to an error that renders account contracts unusable on live networks. This issue affects all accounts vanilla and ethereum flavors in the...

Important: kernel-livepatch-5.10.112-108.499

Issue Overview: A use-after-free vulnerability was found in the Linux kernel's Netfilter subsystem in net/netfilter/nftablesapi.c. This flaw allows a local attacker with user access to cause a privilege escalation issue. CVE-2022-1966 Affected Packages: kernel-livepatch-5.10.112-108.499 Issue...

Important: kernel-livepatch-5.10.118-111.515

Issue Overview: A use-after-free vulnerability was found in the Linux kernel's Netfilter subsystem in net/netfilter/nftablesapi.c. This flaw allows a local attacker with user access to cause a privilege escalation issue. CVE-2022-1966 Affected Packages: kernel-livepatch-5.10.118-111.515 Issue...

OpenZeppelin 安全漏洞

OpenZeppelin is a software application. A standard for secure blockchain applications. A security vulnerability exists in OpenZeppelin Contracts for Cairo v0.2.0 that stems from a bug in OpenZeppelin Contracts for Cairo v0.2.0 that causes account contracts to be unavailable on the live network...

Important: kernel-livepatch-5.10.109-104.500

Issue Overview: A use-after-free vulnerability was found in the Linux kernel's Netfilter subsystem in net/netfilter/nftablesapi.c. This flaw allows a local attacker with user access to cause a privilege escalation issue. CVE-2022-1966 Affected Packages: kernel-livepatch-5.10.109-104.500 Issue...

PT-2022-7584

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 108.0.5359.71 Microsoft Edge affected versions not specified Description The issue is related to a use-after-free vulnerability in the Live Caption component of Google Chrome and Microsoft Edge browsers. This...

Malicious Package

Overview html-live-player is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package...

[SECURITY] Fedora 36 Update: grafana-pcp-3.2.0-3.fc36

This Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries1 and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace1, as well as several dashboards...

CVE-2022-33644

Xbox Live Save Service Elevation of Privilege Vulnerability...

CVE-2022-33644

Xbox Live Save Service Elevation of Privilege Vulnerability...

CVE-2022-33644

Xbox Live Save Service Elevation of Privilege Vulnerability...

Privilege escalation

Xbox Live Save Service Elevation of Privilege Vulnerability...

CVE-2022-33644 Xbox Live Save Service Elevation of Privilege Vulnerability

...

CVE-2022-33644

CVE-2022-33644 affects Xbox Live Save Service and is an Elevation of Privilege on Windows/Xbox components. Connected data confirms the vulnerability type (privilege escalation) and relates it to Windows/Xbox Live Save Service. Public exploits exist for this CVE, and remediation is provided by Mic...

CVE-2022-33644 Xbox Live Save Service Elevation of Privilege Vulnerability

...

Xbox Live Save Service Elevation of Privilege Vulnerability

...

CVE-2022-33644: Undefined Security Weakness

Xbox Live Save Service Elevation of Privilege Vulnerability...

PT-2022-3793 · Microsoft · Xbox Live Save Service +1

Name of the Vulnerable Software and Affected Versions: Xbox Live Save Service affected versions not specified Description: The issue is related to insufficient access restrictions in the Xbox Live Save Service, which can be exploited to bypass system security restrictions and elevate privileges...