In SingleTokenJoinV2.sol, a user can provide malicious input

Handle jayjonah8 Vulnerability details Impact In SingleTokenJoinV2.sol, a user can provide malicious input to the joinTokenSingle function providing an attacker controlled inputToken and an attacker controlled outputBasket. This fake outputBasket can return anything it wants from a fake joinPool...

Security update for python-Pygments (important)

openSUSE Security Update: Security update for python-Pygments Announcement ID: openSUSE-SU-2021:1521-1 Rating: important References: 1184812 Cross-References: CVE-2021-27291 CVSS scores: CVE-2021-27291 NVD : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2021-27291 SUSE: 7.5...

SUSE: Security Advisory (SUSE-SU-2021:3814-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2021:3814-1 Security update for python-Pygments

This update for python-Pygments fixes the following issues: - CVE-2021-27291: Fixed ReDoS via crafted malicious input bsc1184812...

Regular Expression Denial Of Service (ReDoS)

ramda is vulnerable to regular expression denial of service. The trim function in ramda.js does not properly replace the user input strings due to the insufficient regex pattern used for the ws field, allowing a malicious user to crash the application by providing a malicious input...

Denial Of Service (DoS)

ruby is vulnerable to denial of service.The vulnerability exists due to cookie prefix spoofing in CGI::Cookie.parse, which allows an attacker to crash the application by providing a malicious input...

Denial Of Service (DoS)

libsolv is vulnerable to denial of service. The vulnerability exists through the prunetorecommended function in policy.c, allowing an attacker to crash the application via malicious input...

Denial Of Service (DoS)

libsolv is vulnerable to denial of service. The vulnerability exists through the poolinstallablewhatprovides function in repo.h, allowing an attacker to crash the application via malicious input...

Denial Of Service (DoS)

libsolv is vulnerable to denial of service. The vulnerability exists through the pooldisabledsolvable function in repo.h, allowing an attacker to crash the application via malicious input...

Denial Of Service (DoS)

libsolv is vulnerable to denial of service. The vulnerability exists through the poolinstallable function in src/repo.h, allowing an attacker to cause an application crash via malicious input...

Denial Of Service (DoS)

icu is vulnerable to denial of service. The vulnerability exists due a use after free in the pkgcreateWithAssemblyCode function in pkgdata.cpp which allows an attacker to crash the application by providing a malicious input...

Cisco Small Business RV Series Routers Command Injection Vulnerability

A vulnerability in the web-based management interface of certain Cisco Small Business RV Series Routers could allow an authenticated, remote attacker with administrative privileges to inject arbitrary commands into the underlying operating system and execute them using root-level privileges. This...

OPENSUSE-SU-2021:3522-1 Security update for apache2

This update for apache2 fixes the following issues: - CVE-2021-40438: Fixed a SRF via a crafted request uri-path. bsc1190703 - CVE-2021-36160: Fixed an out-of-bounds read via a crafted request uri-path. bsc1190702 - CVE-2021-39275: Fixed an out-of-bounds write in apescapequotes via malicious inpu...

CVE-2021-31359

A local privilege escalation vulnerability in Juniper Networks Junos OS and Junos OS Evolved allows a local, low-privileged user to cause the Juniper DHCP daemon jdhcpd process to crash, resulting in a Denial of Service DoS, or execute arbitrary commands as root. Continued processing of malicious...

CVE-2021-37137

The Snappy frame decoder function doesn't restrict the chunk length which may lead to excessive memory usage. Beside this it also may buffer reserved skippable chunks until the whole chunk was received which may lead to excessive memory usage as well. This vulnerability can be triggered by...

Memory corruption

The Snappy frame decoder function doesn't restrict the chunk length which may lead to excessive memory usage. Beside this it also may buffer reserved skippable chunks until the whole chunk was received which may lead to excessive memory usage as well. This vulnerability can be triggered by...

CVE-2021-37137

The Snappy frame decoder function doesn't restrict the chunk length which may lead to excessive memory usage. Beside this it also may buffer reserved skippable chunks until the whole chunk was received which may lead to excessive memory usage as well. This vulnerability can be triggered by...

Denial Of Service (DoS)

libreoffice:sid is vulnerable to denial of service. The vulnerability exists due to improperly validated signatures for algorithms which allows an attacker to crash the application via malicious input...

SUSE-SU-2021:3335-1 Security update for apache2

This update for apache2 fixes the following issues: - CVE-2021-40438: Fixed a SRF via a crafted request uri-path. bsc1190703 - CVE-2021-36160: Fixed an out-of-bounds read via a crafted request uri-path. bsc1190702 - CVE-2021-39275: Fixed an out-of-bounds write in apescapequotes via malicious inpu...

SUSE SLED12: apache2 / apache2-devel / apache2-doc / apache2-example-pages / etc (SUSE-SU-2021:3299-1)

The remote SUSE Linux SLED12 / SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3299-1 advisory. - CVE-2021-40438: Fixed a SRF via a crafted request uri-path. bsc1190703 - CVE-2021-39275: Fixed an out-of-bounds write in...