User deposits can be turned into sponsors and then be stolen

Handle cmichel Vulnerability details Vulnerability Details When a user deposits to the treasury they first approve the contract and then call its deposit action which performs an ERC20.transferFrom. It's possible for an attacker to frontrun the final deposit transaction after the user approval an...

PT-2021-21125 · Mediawiki +1 · Mediawiki +1

Name of the Vulnerable Software and Affected Versions: MediaWiki versions prior to 1.36 Description: An issue was discovered in the CentralAuth extension. Autoblocks for CentralAuth-issued suppression blocks are not properly implemented. Recommendations: For MediaWiki versions prior to 1.36,...

PT-2021-15399 · Gallagher · Gallagher Command Centre Server

Name of the Vulnerable Software and Affected Versions: Gallagher Command Centre Server versions prior to 8.40.1888 MR3 Gallagher Command Centre Server version 8.30 Description: The issue is related to the cleartext storage of sensitive information in memory, specifically allowing OSDP reader mast...

PT-2021-16574 · Unknown · Libsapeextractor

Name of the Vulnerable Software and Affected Versions: libsapeextractor library versions prior to SMR MAY-2021 Release 1 Description: The issue is related to improper input validation in the scmn mfal read function, which can be exploited to execute arbitrary code on the mediaextractor process...

PYSEC-2021-100

FastAPI is a web framework for building APIs with Python 3.6+ based on standard Python type hints. FastAPI versions lower than 0.65.2 that used cookies for authentication in path operations that received JSON payloads sent by browsers were vulnerable to a Cross-Site Request Forgery CSRF attack. I...

PT-2021-12919 · Intel · Intel Security Library

Name of the Vulnerable Software and Affected Versions: IntelR Security Library versions prior to 3.3 Description: The issue is related to a missing release of resource after its effective lifetime in an API, which may allow a privileged user to potentially enable denial of service via network...

CVE-2021-22550 Enclave memory overwrite/overread vulnerability in Asylo UntrustedCacheMalloc::GetBuffer

An attacker can modify the pointers in enclave memory to overwrite arbitrary memory addresses within the secure enclave. It is recommended to update past 0.6.3 or git commit https://github.com/google/asylo/commit/a47ef55db2337d29de19c50cd29b0deb2871d31c...

Thales Sentinel LDK Run-Time Environment

1. EXECUTIVE SUMMARY CVSS v3 9.6 ATTENTION: Exploitable remotely/low attack complexity Vendor: Thales Equipment: Thales Sentinel LDK Run-Time Environment RTE Vulnerability: Incomplete Cleanup 2. RISK EVALUATION Products that have uninstalled software using the Sentinel LDK Run-Time Environment,...

Johnson Controls Metasys

1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Johnson Controls Equipment: Metasys Servers, Engines, and Tools Vulnerability: Improper Privilege Management 2. RISK EVALUATION Successful exploitation of this vulnerability could give an authenticated...

PT-2021-4274 · Libtpms · Libtpms

Name of the Vulnerable Software and Affected Versions: libtpms versions prior to 0.7.2 libtpms versions prior to 0.8.0 Description: A stack corruption bug was found in libtpms while decrypting data using RSA, which could result in a SIGBUS bad memory access and termination of swtpm. The highest...

Undercollateralized vaults' owner can be overwritten

Handle cmichel Vulnerability details The witch can Witch.grab vaults and the vaultOwnersvaultId field is set to the original owner. However, when the auction time is over and the debt has not been fully paid back, the original owner is not restored, and the witch can grab the same vault again,...

PT-2021-20066 · Synology · Synology Diskstation Manager

Name of the Vulnerable Software and Affected Versions: Synology DiskStation Manager DSM versions prior to 6.2.4-25553 Description: The issue is related to a Path Traversal vulnerability in the PDF Viewer component. This allows remote authenticated users to read limited files. Recommendations: For...

YieldMath.sol / Log2: >= or > ?

Handle gpersoon Vulnerability details Impact The V1 version of YieldMath.sol contains "=" larger or equal, while the V2 version of YieldMath.sol containt "" larger in the log2 function. This change doesn't seem logical and might lead to miss calculations. The difference is present in a number of...

PT-2021-19811 · Deno · Deno

Name of the Vulnerable Software and Affected Versions: Deno versions 1.5.0 through 1.10.1 Description: The issue concerns modules dynamically imported through import or new Worker that might bypass network and file system permission checks when statically importing other modules. An attacker in...

GENIVI Alliance DLT

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: GENIVI Alliance Equipment: DLT-Daemon Vulnerability: Heap-based Buffer Overflow 2. RISK EVALUATION Successful exploitation of this vulnerability could lead to remote code execution or crash the...

Wrong function called in addRegistrationTributeGovernance

Handle shw Vulnerability details Impact The addRegistrationTributeGovernance function in the contract FSD includes an incorrect function, addTribute. According to its function name, the called function should be addGovernanceTribute instead. Proof of Concept Referenced code: FSD.solL140 Recommend...

TributeAccrual missing out-of-bounds checks

Handle cmichel Vulnerability details Vulnerability Details The addTribute and addGovernanceTribute functions underflow when there are no tributes: Tribute storage lastTribute = tributestotalTributes - 1 = tributes-1; // underflow Impact It's bad practice and the iteration with the offset in...

PT-2021-18745 · Podofo +4 · Podofo +4

Name of the Vulnerable Software and Affected Versions: PoDoFo version 0.9.7 Description: A flaw was found in the PdfNamesTree::AddToDictionary function in src/podofo/doc/PdfNamesTree.cpp, which can lead to a stack overflow due to an uncontrolled recursive call. Recommendations: For PoDoFo version...

PT-2021-3126

Name of the Vulnerable Software and Affected Versions nginx versions 1.20.0 Description A security issue in the nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause a 1-byte memory overwrite, resulting in a worker process crash...

PT-2021-23607 · Softwarex · Softwarex

Name of the Vulnerable Software and Affected Versions: SoftwareX versions prior to 1.1.1 Description: Randomly-generated alphanumeric strings contain significantly less entropy than expected. The RandomAlphaNumeric and CryptoRandomAlphaNumeric functions always return strings containing at least o...