6405 matches found
CVE-2022-46773 IBM Robotic Process Automation security bypass
IBM Robotic Process Automation 21.0.0 - 21.0.7 and 23.0.0 is vulnerable to client-side validation bypass for credential pools. Invalid credential pools may be created as a result. IBM X-Force ID: 242951...
PT-2023-15023 · Ibm · Ibm Robotic Process Automation
Name of the Vulnerable Software and Affected Versions: IBM Robotic Process Automation versions 21.0.0 through 21.0.7 IBM Robotic Process Automation version 23.0.0 Description: The issue concerns a client-side validation bypass for credential pools, which may result in the creation of invalid...
ZERO TRUNCATION COULD LEAD TO UNEXPECTED RESULTS
Lines of code Vulnerability details Impact Precision issue leading to zero truncation due to numerator smaller than denominator in a ratio or a division happens readily in Solidity if extra cares have not been given to it. Arithmetic operations running into this incident are typically associated...
Unclaimed rewards will be stuck unrecoverable
Lines of code Vulnerability details Impact The vulnerability relies in: unchecked uint256 share = points PRECISION / pool.totalPoints totalReward; uint256 daoShare = share pool.daoTax / 100 DIVISOR; share /= PRECISION; daoShare /= PRECISION; return share - daoShare, daoShare; The problem is that ...
BYTES can be used to increase points by staking them immediately before withdrawing them
Lines of code Vulnerability details Impact When staking BYTES, users don't need to lock them for any specific time. BYTES are locked in a Citizen, and they are withdrawn together with the Citizen. Users can stake all the BYTES they own before withdrawing the citizen, increasing their points in th...
IBM Robotic Process Automation 授权问题漏洞
IBM Robotic Process Automation is a robotic process automation product from International Business Machines IBM. An authorization issue vulnerability exists in IBM Robotic Process Automation versions 21.0.0 through 21.0.7 and 23.0.0, which can be exploited by an attacker to create an invalid...
Octopus Deploy 安全漏洞
Octopus Deploy is an automation tool for .NET, Java, and other application development deployment from Octopus Deploy Australia. A security vulnerability exists in Octopus Deploy Octopus Server that stems from the possibility of a user viewing a work pool without explicitly assigned permissions...
Rounding division error could occur in the receiveRandomNumber function
Lines of code Vulnerability details Impact This rounding division error could result in the prize pool being drained over time if it occurs repeatedly, as the actual amount of prizes awarded would always be slightly less than the intended amount. Proof of Concept drawRewardSizedrawFinalized,...
Requirement to update Virtual Hosting Pool ID after moving machines to new host connection
After moving virtual machines from an old host connection to a new host connection, you may experience issues with power managing machines from the PVS console or if VMs have been created with BDM Boot Partition, you may not be able to update the BDM Boot partition when you add an additional PVS...
EulerOS 2.0 SP5 : wayland (EulerOS-SA-2023-1519)
According to the versions of the wayland packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An internal reference count is held on the buffer pool, incremented every time a new buffer is created from the pool. The reference count is...
CVE-2022-26416
Rejected reason: This candidate was in a CNA pool that was not assigned to any issues during 2022...
CVE-2022-26418
Rejected reason: This candidate was in a CNA pool that was not assigned to any issues during 2022...
CVE-2022-26039
Rejected reason: This candidate was in a CNA pool that was not assigned to any issues during 2022...
CVE-2022-26055
Rejected reason: This candidate was in a CNA pool that was not assigned to any issues during 2022...
CVE-2022-25968
Rejected reason: This candidate was in a CNA pool that was not assigned to any issues during 2022...
CVE-2022-26027
Rejected reason: This candidate was in a CNA pool that was not assigned to any issues during 2022...
CVE-2022-26123
Rejected reason: This candidate was in a CNA pool that was not assigned to any issues during 2022...
CVE-2022-25957
Rejected reason: This candidate was in a CNA pool that was not assigned to any issues during 2022...