PT-2022-8714

Name of the Vulnerable Software and Affected Versions No vulnerable software or affected versions specified. Description The provided information does not contain details about a specific vulnerability. It appears to be a rejection notice for a candidate number from the National Vulnerability...

PT-2022-7797

Name of the Vulnerable Software and Affected Versions No vulnerable software or affected versions specified. Description The candidate number was withdrawn by its CNA, as stated in the National Vulnerability Database. Recommendations At the moment, there is no information about a newer version th...

PT-2022-7758

Name of the Vulnerable Software and Affected Versions No vulnerable software or affected versions specified. Description The candidate number was withdrawn by its CNA, as stated in the National Vulnerability Database. Recommendations At the moment, there is no information about a newer version th...

PT-2022-8178

Name of the Vulnerable Software and Affected Versions No vulnerable software or affected versions specified. Description The provided information does not contain details about a specific vulnerability. It appears to be a notification about a rejected CVE candidate number, CVE-2019-19157, with no...

PT-2022-7796

Name of the Vulnerable Software and Affected Versions No vulnerable software or affected versions specified. Description The candidate number was withdrawn by its CNA, as stated in the National Vulnerability Database. Recommendations At the moment, there is no information about a newer version th...

PT-2022-7789

Name of the Vulnerable Software and Affected Versions No vulnerable software or affected versions specified. Description The candidate number was withdrawn by its CNA, as stated in the National Vulnerability Database. Recommendations At the moment, there is no information about a newer version th...

PT-2022-7791

Name of the Vulnerable Software and Affected Versions No vulnerable software or affected versions specified. Description The candidate number was withdrawn by its CNA, as stated in the National Vulnerability Database. Recommendations At the moment, there is no information about a newer version th...

PT-2022-7798

Name of the Vulnerable Software and Affected Versions No vulnerable software or affected versions specified. Description The candidate number was withdrawn by its CNA, as stated in the National Vulnerability Database. Recommendations At the moment, there is no information about a newer version th...

PT-2022-8716

Name of the Vulnerable Software and Affected Versions No vulnerable software or affected versions specified. Description The provided information does not contain details about a specific vulnerability. It appears to be a notification about a rejected candidate number from the National...

PT-2022-8174

Name of the Vulnerable Software and Affected Versions No vulnerable software or affected versions specified. Description The provided information does not contain details about a specific vulnerability. It appears to be a rejection notice for a candidate number from the National Vulnerability...

CVE-2022-34151: Use of Hard-coded Credentials

Use of hard-coded credentials vulnerability exists in Machine automation controller NJ series all models V 1.48 and earlier, Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, Automation software 'Sysmac...

CVE-2022-33208: Authentication Bypass by Capture-replay

Authentication bypass by capture-replay vulnerability exists in Machine automation controller NJ series all models V 1.48 and earlier, Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, Automation software...

PT-2022-7742

Name of the Vulnerable Software and Affected Versions No vulnerable software or affected versions specified. Description The candidate number was withdrawn by its CNA, as stated in the National Vulnerability Database. Recommendations At the moment, there is no information about a newer version th...

PT-2022-7733

Name of the Vulnerable Software and Affected Versions No vulnerable software or affected versions specified. Description The provided information does not describe a vulnerability but rather indicates that a CVE candidate number has been rejected due to incorrect assignment. All references and...

PT-2022-7734

Name of the Vulnerable Software and Affected Versions No vulnerable software or affected versions specified. Description The issue was investigated and found not to be a security issue. It was withdrawn by its CNA. Recommendations At the moment, there is no information about a newer version that...

Illuminate PT redeeming allows for burning from other accounts

Lines of code Vulnerability details Illuminate PT burns shares from a user supplied address account instead of user's account. With such a discrepancy a malicious user can burn all other's user shares by having the necessary shares on her balance, while burning them from everyone else. Setting th...

Sense AMM address can be manipulated, allowing unlimited mint of principal tokens

Lines of code Vulnerability details Lender's lend for Sense uses ISensex.swapUnderlyingForPTs output to determine the Illuminate PT amount to be minted for the user. x is a user supplied and not verified address, which can be precooked by a malicious user to return any inflated amount, that will ...

Able to mint any amount of PT

Lines of code Lender.solL192-L235 Lender.solL486-L534 Lender.solL545-L589 Vulnerability details Impact Some of the lend functions do not validate addresses sent as input which could lead to a malicous user being able to mint more PT tokens than they should. Functions affect: Illuminate and Yield...

Unable to redeem from Notional

Lines of code Redeemer.solL193 Vulnerability details Impact The maxRedeem function is a view function which only returns the balance of the Redeemer.sol contract. After this value is obtained, the PT is not redeemed from Notional. The user will be unable to redeem PT from Notional through...

Illuminate PT redeeming do not return underlying to a user

Lines of code Vulnerability details In the second step of two step redeeming process, the underlying funds should be located in the Redeemer contract as external system burned the shares the Redeemer obtained from the Lender contract and returned underlying to Redeemer. Then Redeemer's Illuminate...