19647 matches found
Potential Division by Zero in utilizationRate method
Lines of code Vulnerability details Impact In the case where cash + borrows - reserves equals 0, the function would try to divide by zero which will result in a runtime error. Proof of Concept An attacker might manipulate the state of the contract to where cash + borrows - reserves equals zero...
EulerOS 2.0 SP9 : apr (EulerOS-SA-2023-1859)
According to the versions of the apr package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Integer Overflow or Wraparound vulnerability in aprencode functions of Apache Portable Runtime APR allows an attacker to write beyond bounds of a...
EulerOS 2.0 SP9 : docker-engine (EulerOS-SA-2023-1864)
According to the versions of the docker-engine package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Moby is an open-source project created by Docker to enable software containerization. A bug was found in Moby Docker Engine where...
EulerOS 2.0 SP9 : apr-util (EulerOS-SA-2023-1860)
According to the versions of the apr-util package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Integer Overflow or Wraparound vulnerability in aprbase64 functions of Apache Portable Runtime Utility APR-util allows an attacker to write...
EulerOS 2.0 SP9 : apr-util (EulerOS-SA-2023-1835)
According to the versions of the apr-util package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Integer Overflow or Wraparound vulnerability in aprbase64 functions of Apache Portable Runtime Utility APR-util allows an attacker to write...
The vulnerability of the Web Runtime SEC component of the JD Edwards EnterpriseOne Tools, a resource management system, allows a perpetrator to gain access to read, modify, add, or delete data.
The vulnerability of the Web Runtime SEC component of the JD Edwards EnterpriseOne Tools system for resource management involves insufficient validation of input data. Exploiting this vulnerability could allow an attacker to gain read, modify, add, or delete access to data...
SUSE-SU-2023:2185-1 Security update for SUSE Manager Client Tools
This update fixes the following issues: prometheus-postgresexporter: - Security issues fixed: CVE-2022-46146: Fix authentication bypass via cache poisoning bsc1208060 - Other non-security issues fixed: Adapt the systemd service security configuration to be able to start it on for Red Hat Linux...
SUSE-SU-2023:2183-1 Security update for SUSE Manager Client Tools
This update fixes the following issues: golang-github-prometheus-alertmanager: - Security issues fixed: CVE-2022-46146: Fix authentication bypass via cache poisoning bsc1208051 prometheus-blackboxexporter: - Security issues fixed: CVE-2022-46146: Fix authentication bypass via cache poisoning...
[SECURITY] Fedora 37 Update: java-11-openjdk-11.0.19.0.7-1.fc37
The OpenJDK 11 runtime environment...
[SECURITY] Fedora 36 Update: java-11-openjdk-11.0.19.0.7-1.fc36
The OpenJDK 11 runtime environment...
Division by Zero Vulnerability in _calculateNewRewards function.
Lines of code Vulnerability details Impact The calculateNewRewards function in the smart contract performs a division operation with totalInterestEarnedInPeriod, which could be zero, but there is a problem that can result in a division-by-zero error, causing the smart contract to behave...
CVE-2023-32080
Summary: CVE-2023-32080 affects Wings (Pterodactyl Panel) prior to v1.7.5 and v1.11.0 prior to v1.11.6. Affected code paths allow an attacker to escalate by injecting commands via the server install script (or user data/environment variables) to gain access to the host running Wings. The issue is...
Huawei EulerOS: Security Advisory for docker-engine (EulerOS-SA-2023-1837)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for apr-util (EulerOS-SA-2023-1835)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for apr (EulerOS-SA-2023-1859)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2023-32080: Execution with Unnecessary Privileges
Wings is the server control plane for Pterodactyl Panel. A vulnerability affecting versions prior to 1.7.5 and versions 1.11.0 prior to 1.11.6 impacts anyone running the affected versions of Wings. This vulnerability can be used to gain access to the host system running Wings if a user is able to...
SUSE SLES15 / openSUSE 15 Security Update : redis (SUSE-SU-2023:2122-1)
The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2122-1 advisory. - CVE-2022-36021: Fixed possible integer overflow via specially crafted SRANDMEMBER, ZRANDMEMBER, and HRANDFIELD...
CVE-2023-24942
Remote Procedure Call Runtime Denial of Service Vulnerability...
