UBUNTU-CVE-2023-45805

pdm is a Python package and dependency manager supporting the latest PEP standards. It's possible to craft a malicious pdm.lock file that could allow e.g. an insider or a malicious open source project to appear to depend on a trusted PyPI project, but actually install another project. A project f...

pdm security breach

pdm is a Python package management tool for the PDM project. A security vulnerability exists in versions of pdm prior to 0.11.2, which stems from the ability to craft a malicious pdm.lock file that allows an insider or malicious open source project to appear to rely on a trusted PyPI project, but...

User is unable to undelegate their votes from a ProxyDelegator

Lines of code Vulnerability details Impact The delegate is used to delegate sender's votes to someone else without the need to actually send the tokens. Here is a quick intro for the function: delegateaddress delegatee This function allows msg.sender to delegate their voting power to delegatee an...

Huawei HarmonyOS Denial of Service Vulnerability (CNVD-2023-98208)

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A denial of service vulnerability exists in Huawei HarmonyOS, which stems from the presence of mutual exclusion lock management in kernel modules. An attacke...

PT-2023-9467 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a race condition in the NFC component of the Linux kernel, specifically in the nfc llcp sock get and nfc llcp sock get sn functions. This can lead to a Use Afte...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A denial of service vulnerability exists in Huawei HarmonyOS, which stems from the presence of mutual exclusion lock management in kernel modules. An attacke...

CVE-2023-42449 Malicious head initialiser can extract PTs from control of Hydra scripts, leading to locked participant commits or spoofed commits

Hydra is the two-layer scalability solution for Cardano. Prior to version 0.13.0, it is possible for a malicious head initializer to extract one or more PTs for the head they are initializing due to incorrect data validation logic in the head token minting policy which then results in an flawed...

CVE-2023-32572

A flaw exists in FlashArray Purity wherein under limited circumstances, an array administrator can alter the retention lock of a pgroup and disable pgroup SafeMode protection...

Design/Logic Flaw

A flaw exists in FlashArray Purity wherein under limited circumstances, an array administrator can alter the retention lock of a pgroup and disable pgroup SafeMode protection...

Pure Storage FlashArray Security Vulnerability

The Pure Storage FlashArray is an all-QLC flash storage array from Pure Storage. A security vulnerability exists in FlashArray Purity, which arises from a flaw in FlashArray Purity that allows an array administrator to change the retention lock of a pgroup and disable pgroup SafeMode protection...

Immutability Warning for Data Domain Repository: "Immutability flag on backups was set with warning"

Challenge A backup job that targets a Dell Data Domain repository completes with the warning, "Immutability flag on backups was set with warning: ", specifically with the endings: Immutability period for some backups exceeds the maximum value allowed by the target repository, using the maximum...

CVE-2023-28372

A flaw exists in FlashBlade Purity OE Version 4.1.0 whereby a user with privileges to extend an object’s retention period can affect the availability of the object lock...

Design/Logic Flaw

A flaw exists in FlashBlade Purity OE Version 4.1.0 whereby a user with privileges to extend an object’s retention period can affect the availability of the object lock...

CVE-2023-32572 FlashArray pgroup Retention Lock SafeMode Protection

A flaw exists in FlashArray Purity wherein under limited circumstances, an array administrator can alter the retention lock of a pgroup and disable pgroup SafeMode protection...

CVE-2023-32572

The CVE-2023-32572 entry concerns Pure Storage FlashArray Purity. Under limited circumstances, an array administrator can alter the retention lock of a pgroup and disable pgroup SafeMode protection. Affected component is FlashArray Purity’s pgroup retention lock mechanism; impact is integrity imp...

CVE-2023-32572 FlashArray pgroup Retention Lock SafeMode Protection

A flaw exists in FlashArray Purity wherein under limited circumstances, an array administrator can alter the retention lock of a pgroup and disable pgroup SafeMode protection...

CVE-2023-28372 FlashBlade Object Store Privileged Access

A flaw exists in FlashBlade Purity OE Version 4.1.0 whereby a user with privileges to extend an object’s retention period can affect the availability of the object lock...

CVE-2023-28372

CVE-2023-28372 affects FlashBlade Purity (OE) , where a user with privileges to extend an object’s retention period can affect the availability of the object lock. The available connected sources corroborate the same flaw scope and impact, indicating an object-lock availability impact when privil...

PT-2023-21679 · Pure Storage · Flashblade Purity

Name of the Vulnerable Software and Affected Versions: FlashBlade Purity OE version 4.1.0 Description: A flaw exists in FlashBlade Purity OE whereby a user with privileges to extend an object's retention period can affect the availability of the object lock. Recommendations: For version 4.1.0,...

PT-2023-23881 · Pure Storage · Flasharray Purity

Name of the Vulnerable Software and Affected Versions: FlashArray Purity affected versions not specified Description: A flaw exists in FlashArray Purity wherein under limited circumstances, an array administrator can alter the retention lock of a pgroup and disable pgroup SafeMode protection...