1706 matches found
Minting to user after funds deposit is now omitted in Lender's Swivel lend
Lines of code Vulnerability details Lender's Swivel version of lend pulls the underlying funds from the user, opens the necessary positions, but now fails to mint Illuminate PT for the user, so there will be no records for her investment and the corresponding funds aren't recoverable. Setting...
PT-2022-3476 · Omron · Sysmac Studio +4
Name of the Vulnerable Software and Affected Versions: Machine automation controller NJ series versions 1.48 and earlier Machine automation controller NX7 series versions 1.28 and earlier Machine automation controller NX1 series versions 1.48 and earlier Automation software 'Sysmac Studio' versio...
PT-2022-11410
Name of the Vulnerable Software and Affected Versions No vulnerable software or affected versions specified. Description The issue was initially considered but further investigation showed it was not a security issue. It was withdrawn by its CNA. Recommendations At the moment, there is no...
PT-2022-3398 · Elastic · Elasticsearch
Name of the Vulnerable Software and Affected Versions: Elasticsearch versions 8.0.0 through 8.2.0 Description: A Denial of Service flaw was discovered in Elasticsearch, related to insufficient exception handling. This issue can be exploited by an unauthenticated attacker to shut down an...
new packages: pt-sans-fonts
An update is available for pt-sans-fonts. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...
new packages: mythes-pt
An update is available for mythes-pt. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterpri...
new packages: hyphen-pt
An update is available for hyphen-pt. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterpri...
new packages: hunspell-pt
An update is available for hunspell-pt. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...
rainierfamilypt.com Cross Site Scripting vulnerability OBB-2616634
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
PT-2022-3450 · Microsoft · Windows Remote Desktop Protocol Client +1
Name of the Vulnerable Software and Affected Versions: Windows Remote Desktop Protocol Client affected versions not specified Description: The issue is related to insufficient input validation in the Remote Desktop Protocol Client of the Windows operating system. This can be exploited by a remote...
PT-2022-2564 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the implementation of the LDAP protocol in Microsoft Windows, specifically due to insufficient input validation. This can be exploited by a remote attacker to execut...
mimo2.pt Cross Site Scripting vulnerability OBB-2609755
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
pt.sinowolfdekor.com Cross Site Scripting vulnerability OBB-2538360
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
pt.txheatexchanger.com Cross Site Scripting vulnerability OBB-2531583
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
pt.tangjutextile.com Cross Site Scripting vulnerability OBB-2531582
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
pt.tfrollforming.com Cross Site Scripting vulnerability OBB-2528996
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
PT-2022-4325 · Cisco · Cisco Ios Xe
Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software affected versions not specified Description: A vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote attacker to perform an injection attack against an affected device. This...
pt.tophdextruder.com Cross Site Scripting vulnerability OBB-2499149
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
PT-2022-2760 · Microsoft · Windows Dns Server +1
Name of the Vulnerable Software and Affected Versions: Windows DNS Server affected versions not specified Description: The issue is caused by synchronization errors when using a shared resource in the Windows operating system. It allows remote attackers to execute arbitrary code and affect the...
PT-2022-2541 · Microsoft · Windows Cluster Shared Volume +1
Name of the Vulnerable Software and Affected Versions: Windows Cluster Shared Volumes CSV affected versions not specified Description: The issue is related to insufficient protection of service data in the Cluster Shared Volumes CSV of Windows operating systems. This can allow an attacker to gain...