6622 matches found
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none...
CVE-2021-39583
An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function poollookupstring2 located in pool.c. It allows an attacker to cause Denial of Service...
CVE-2021-39584
An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function namespacesethash located in pool.c. It allows an attacker to cause Denial of Service...
CVE-2021-39574
An issue was discovered in swftools through 20200710. A heap-buffer-overflow exists in the function poolread located in pool.c. It allows an attacker to cause code Execution...
UBUNTU-CVE-2021-39583
An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function poollookupstring2 located in pool.c. It allows an attacker to cause Denial of Service...
CVE-2021-39574
An issue was discovered in swftools through 20200710. A heap-buffer-overflow exists in the function poolread located in pool.c. It allows an attacker to cause code Execution...
Swftools 代码问题漏洞
SWFTools is a suite of open source software tools for creating and manipulating SWF files. a null pointer dereference vulnerability exists in the poollookupuint function in SWFTools pool.c. An attacker could exploit this vulnerability to cause a denial of service...
_addLiquidity will lose user funds due to frontrunning.
Handle tensors Vulnerability details Impact If addLiquidity is ever called with funds at stake anything more than a few thousand dollars it becomes profitable for MEV bots and other frontrunners to frontrun the addLiquidity call by skewing the pool reserves lowering the amount of LP tokens return...
PostAuctionLauncher can be manipulated by a caller other than the owner
Handle tensors Vulnerability details Impact A comment in the code asks whether it is safe to allow anyone to call PostAuctionLauncher, finalize. In the case that an attacker can get even a few wei of the auction token, it is not safe. Suppose an attacker somehow gets a small amount of the auction...
CVE-2021-23032
On version 16.x before 16.1.0, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.4, and all versions of 13.1.x and 12.1.x, when a BIG-IP DNS system is configured with non-default Wide IP and pool settings, undisclosed DNS responses can cause the Traffic Management Microkernel TMM to terminate. Note:...
CVE-2021-23032
On version 16.x before 16.1.0, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.4, and all versions of 13.1.x and 12.1.x, when a BIG-IP DNS system is configured with non-default Wide IP and pool settings, undisclosed DNS responses can cause the Traffic Management Microkernel TMM to terminate. Note:...
CVE-2021-23032
CVE-2021-23032 affects BIG-IP DNS. When a BIG-IP DNS system is configured with non-default Wide IP and pool settings, undisclosed DNS responses can cause the Traffic Management Microkernel (TMM) to terminate, leading to a DoS of the data plane. Affected branches include 16.0.x (16.0.0–16.0.1), 15...
Amazon Linux AMI : curl (ALAS-2021-1525)
The version of curl installed on the remote host is prior to 7.61.1-12.99. It is, therefore, affected by a vulnerability as referenced in the ALAS-2021-1525 advisory. A flaw was found in libcurl in the way libcurl handles previously used connections without accounting for 'issuer cert' and...
USN-5021-1: curl vulnerabilities | Cloud Foundry
Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 18.04 Description Harry Sintonen and Tomas Hoger discovered that curl incorrectly handled TELNET connections when the -t option was used on the command line. Uninitialized data possibly containing sensitive information cou...
CVE-2021-33929
Buffer overflow vulnerability in function pooldisabledsolvable in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service...
UBUNTU-CVE-2021-33928
Buffer overflow vulnerability in function poolinstallable in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service...
GHSA-7GHQ-FVR3-PJ2X Incomplete validation in `MaxPoolGrad`
Impact An attacker can trigger a denial of service via a segmentation fault in tf.rawops.MaxPoolGrad caused by missing validation: python import tensorflow as tf tf.rawops.MaxPoolGrad originput = tf.constant, shape=3, 0, 0, 2, dtype=tf.float32, origoutput = tf.constant, shape=3, 0, 0, 2,...
F5 BIG-IP 输入验证错误漏洞
F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, remote access policy management, etc. A denial of service vulnerability exists in F5 BIG-IP DNS, which stems from the fact that when the BIG-IP DNS system is...
OPENSUSE-SU-2021:2812-1 Security update for libvirt
This update for libvirt fixes the following issues: Security issues fixed: - CVE-2021-3631: fix SELinux label generation logic bsc1187871 - CVE-2021-3667: Unlock object on ACL fail in storagePoolLookupByTargetPath bsc1188843 Non-security issues fixed: - virtlockd: Don't report error if lockspace...