Lucene search
+L

2403 matches found

Code423n4
Code423n4
•added 2022/04/01 12:00 a.m.•18 views

Wrong constant definition

Lines of code Vulnerability details Impact PERCENTAGESCALE in Splitter.sol is defined as 1e6 and this is not aligned with used percentage scale, which is an inverse of a basis point - 1e4. Contracts rely on the values displayed by external function of a contract. They may align a percentage to th...

6.8AI score
SaveExploits0
CNVD
CNVD
•added 2022/03/29 12:00 a.m.•61 views

IBM Spectrum Scale Denial of Service Vulnerability (CNVD-2022-72217)

BM Spectrum Scale is a scalable data and file management solution from IBM USA based on IBM GPFS, an enterprise file management system optimized for petabyte-scale storage management. The product supports helping customers reduce storage costs while improving security and management efficiency in...

6.2CVSS5.5AI score0.00229EPSS
SaveExploits0References1
OSV
OSV
•added 2022/03/25 7:15 p.m.•17 views

CVE-2021-3814

It was found that 3scale's APIdocs does not validate the access token, in the case of invalid token, it uses session auth instead. This conceivably bypasses access controls and permits unauthorized information disclosure...

7.5CVSS7.1AI score0.01158EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
•added 2022/03/22 10:34 a.m.•46 views

Security Bulletin: IBM WebSphere eXtreme Scale is vulnerable to arbitrary code execution due to Apache Log4j v1.x (CVE-2022-23307)

Summary Apache Log4j is used by IBM WebSphere eXtreme Scale as part of remote logging functionality CVE-2022-23307. The fix includes Apache Log4j v2.17.1. Vulnerability Details CVEID: CVE-2022-23307 DESCRIPTION: Apache Log4j could allow a remote attacker to execute arbitrary code on the system,...

9CVSS7.8AI score0.54411EPSS
SaveExploits0Affected Software1
Openbugbounty
Openbugbounty
•added 2022/03/22 7:26 a.m.•10 views

scale-models.nl Improper Access Control vulnerability OBB-2440285

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

0.1AI score
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
•added 2022/03/21 1:37 p.m.•49 views

Security Bulletin: A vulnerability in Samba affects IBM Spectrum Scale SMB protocol access method (CVE-2016-2124)

Summary A Samba vulnerability affects IBM Spectrum Scale SMB protocol access method that could cause man-in-the-middle attack . A fix for this vulnerability is available. Vulnerability Details CVEID: CVE-2016-2124 DESCRIPTION: Samba SMB1 client is vulnerable to a man-in-the-middle attack, caused ...

5.9CVSS1.2AI score0.01766EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2022/03/21 1:32 p.m.•73 views

Security Bulletin: A vulnerability in Samba affects IBM Spectrum Scale SMB protocol access method (CVE-2021-23192)

Summary A Samba vulnerability affects IBM Spectrum Scale SMB protocol access method that could allow a remote attacker to bypass security restrictions and gain unauthorized access to files. Vulnerability Details CVEID: CVE-2021-23192 DESCRIPTION: Samba could allow a remote attacker to bypass...

7.5CVSS7.5AI score0.01953EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2022/03/03 10:43 a.m.•28 views

Security Bulletin: A vulnerability has been identified in IBM Spectrum Scale where mmfsd daemon can be prevented from servicing requests (CVE-2020-4925)

Summary A security vulnerability has been identified in all levels of IBM Spectrum Scale where mmfsd daemon can be prevented from servicing requests. A fix for this vulnerability is available Vulnerability Details CVEID: CVE-2020-4925 DESCRIPTION: A security vulnerability in the Spectrum Scale...

6.2CVSS5.6AI score0.00229EPSS
SaveExploits0Affected Software1
attackerkb
attackerkb
•added 2022/03/03 12:00 a.m.•19 views

CVE-2022-24413

Dell PowerScale OneFS, versions 8.2.2-9.3.x, contain a time-of-check-to-time-of-use vulnerability. A local user with access to the filesystem could potentially exploit this vulnerability, leading to data loss...

4.4CVSS5.8AI score0.00143EPSS
SaveExploits0References2Affected Software1
attackerkb
attackerkb
•added 2022/03/03 12:00 a.m.•16 views

CVE-2022-23163

Dell PowerScale OneFS, 8.2,x, 9.1.0.x, 9.2.1.x, and 9.3.0.x contain a denial of service vulnerability. A local malicious user could potentially exploit this vulnerability, leading to denial of service/data unavailability...

5.5CVSS6.1AI score0.00214EPSS
SaveExploits0References2
NVD
NVD
•added 2022/03/01 5:15 p.m.•35 views

CVE-2020-4925

A security vulnerability in the Spectrum Scale 5.0 and 5.1 allows a non-root user to overflow the mmfsd daemon with requests and preventing the daemon to service other requests. IBM X-Force ID: 191599...

6.2CVSS0.00229EPSS
SaveExploits0References2
OSV
OSV
•added 2022/03/01 5:15 p.m.•20 views

CVE-2020-4925

A security vulnerability in the Spectrum Scale 5.0 and 5.1 allows a non-root user to overflow the mmfsd daemon with requests and preventing the daemon to service other requests. IBM X-Force ID: 191599...

5.5CVSS6.4AI score0.00229EPSS
SaveExploits0References2
Prion
Prion
•added 2022/03/01 5:15 p.m.•29 views

Design/Logic Flaw

A security vulnerability in the Spectrum Scale 5.0 and 5.1 allows a non-root user to overflow the mmfsd daemon with requests and preventing the daemon to service other requests. IBM X-Force ID: 191599...

2.1CVSS5.4AI score0.00229EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2022/03/01 4:45 p.m.•41 views

CVE-2020-4925

A security vulnerability in the Spectrum Scale 5.0 and 5.1 allows a non-root user to overflow the mmfsd daemon with requests and preventing the daemon to service other requests. IBM X-Force ID: 191599...

6.2CVSS5.5AI score0.00229EPSS
SaveExploits0References2
CVE
CVE
•added 2022/03/01 4:45 p.m.•79 views

CVE-2020-4925

IBM Spectrum Scale 5.0 and 5.1 are affected by CVE-2020-4925, where a non-root user can overflow the mmfsd daemon with requests and prevent the daemon from servicing other requests. The issue is mitigated by upgrading to 5.1.1 or later (including 5.1.2+); remediation guidance is provided in IBM’s...

6.2CVSS5.4AI score0.00229EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2022/03/01 12:00 a.m.•5 views

PT-2022-9040

Name of the Vulnerable Software and Affected Versions Spectrum Scale versions 5.0 through 5.1 Description A security issue in Spectrum Scale allows a non-root user to overflow the mmfsd daemon with requests, preventing it from servicing other requests. Recommendations For Spectrum Scale version...

6.2CVSS0.00229EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/01 12:00 a.m.•5 views

CVE-2020-4925: Undefined Security Weakness

A security vulnerability in the Spectrum Scale 5.0 and 5.1 allows a non-root user to overflow the mmfsd daemon with requests and preventing the daemon to service other requests. IBM X-Force ID: 191599...

6.2CVSS6.3AI score0.00229EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/02/28 12:00 a.m.•14 views

CVE-2020-4925

A security vulnerability in the Spectrum Scale 5.0 and 5.1 allows a non-root user to overflow the mmfsd daemon with requests and preventing the daemon to service other requests. IBM X-Force ID: 191599...

6.2CVSS5.5AI score0.00229EPSS
SaveExploits0References3Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2022/02/03 3:52 p.m.•28 views

Security Bulletin: Vulnerability in Apache Log4j affects IBM Spectrum Scale (CVE-2021-4104)

Summary A vulnerability in Apache Log4j could allow an attacker to execute arbitrary code on the system. This vulnerability may affect IBM Spectrum Scale due to its use of Log4j for logging. Vulnerability Details CVEID: CVE-2021-4104 DESCRIPTION: Apache Log4j could allow a remote attacker to...

7.5CVSS8.1AI score0.80599EPSS
SaveExploits9Affected Software1
attackerkb
attackerkb
•added 2022/01/31 12:00 a.m.•12 views

CVE-2022-22561

Dell PowerScale OneFS, versions 8.2.x-9.3.0.x, contain an improper restriction of excessive authentication attempts. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to compromised accounts...

9.8CVSS7.4AI score0.0141EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder