461 matches found
CNft.sol - revert inside safeTransferFrom will break composability & standard behaviour
Lines of code Vulnerability details The function safeTransferFrom is a standard interface in ERC1155, and its expected to succeed if all the parametes are valid, and revert on error, which is not the case here so its a deviation. Refer to the EIP-1155 safeTransferFrom rules: MUST revert if to is...
How a senior product manager is leading the passwordless movement at Microsoft
May 5, 2022, is World Password Day, a day we all use to create awareness around password security. At Microsoft, we choose to celebrate replacing passwords with better and more secure ways to sign in. I can’t think of a better person at Microsoft to represent this journey than Libby Brown, a seni...
Huawei HarmonyOS Licensing Issue Vulnerability (CNVD-2022-44618)
Huawei HarmonyOS is an operating system from Huawei, a Chinese company. Huawei HarmonyOS is vulnerable to licensing issues. Successful exploitation of this vulnerability could result in a usability impact. An attacker could use this vulnerability to bypass Web authentication and gain administrati...
Virtuozzo Hybrid Server 7.5 Update 3 Hotfix 1 (7.5.3-396)
The Hotfix 1 for Virtuozzo Hybrid Server 7.5 Update 3 provides stability and usability bug fixes Vulnerability id: PSBM-139281 Optimized cache and memory usage while creating backups. Vulnerability id: PSBM-139170 The container backup process could hang when working with NFS backup storage...
Huawei HarmonyOS authorization issue vulnerability
Huawei HarmonyOS is an operating system from Huawei, a Chinese company. Huawei HarmonyOS is vulnerable to licensing issues. Successful exploitation of this vulnerability could result in a usability impact. An attacker could use this vulnerability to bypass Web authentication and gain administrati...
Huawei Smartphone Out-of-Bounds Reading Vulnerability
Huawei Smartphone is a cell phone product launched by Huawei. Huawei Smartphone is an out-of-bounds read vulnerability in Huawei HarmonyOS, a full-scenario distributed operating system for the Internet of Everything. The vulnerability stems from an out-of-bounds read vulnerability in a module in...
WordPress miniOrange's Google Authenticator plugin cross-site request forgery vulnerability
WordPress is a blogging platform developed by the Wordpress Foundation using the PHP language. WordPress plugin is a WordPress application plugin. WordPress miniOrange's Google Authenticator plugin version 5.5 or earlier is vulnerable to a cross-site request forgery vulnerability that stems from...
Renouncepauser function is dangerous
Lines of code Vulnerability details Impact If pauser makes an error all the protocol will be unusable Proof of Concept The funtion renouncePauserPausable.sol which affect several contracts is dangerous. function renouncePauser external virtual onlyPauser emit PauserChangedpauser, address0; pauser...
Huawei Emui and Magic UI video framework stack buffer overflow vulnerability
Huawei Emui is a mobile operating system developed on Android. Magic Ui is a mobile operating system developed on Android. Huawei Emui and Magic UI video framework are vulnerable to a stack buffer overflow vulnerability that can be exploited by attackers to impact usability...
Huawei Emui and Magic UI video framework heap buffer overflow vulnerability
Huawei Emui is a mobile operating system developed on Android. magic Ui is a mobile operating system developed on Android. heap buffer overflow vulnerability exists in Huawei Emui and Magic UI video framework, which can be exploited by attackers to impact usability...
Huawei Emui and Magic UI video framework heap buffer overflow vulnerability (CNVD-2022-20288)
Huawei Emui is a mobile operating system developed on Android. magic Ui is a mobile operating system developed on Android. heap buffer overflow vulnerability exists in Huawei Emui and Magic UI video framework, which can be exploited by attackers to impact usability...
Huawei Emui and Magic UI Incorrect Buffer Size Calculation Vulnerability (CNVD-2022-20292)
Huawei Emui is a mobile operating system developed on Android. Magic Ui is a mobile operating system developed on Android. Huawei Emui and Magic UI are vulnerable to incorrect buffer size calculation, which can be exploited by attackers to impact usability...
Huawei Emui and Magic UI incorrect buffer size calculation vulnerability
Huawei Emui is a mobile operating system developed on Android. Magic Ui is a mobile operating system developed on Android. Huawei Emui and Magic UI are vulnerable to incorrect buffer size calculation, which can be exploited by attackers to impact usability...
HUAWEI EMUI/Magic UI security vulnerabilities
Huawei Emui is a mobile operating system developed on Android. Magic Ui is a mobile operating system developed on Android. Huawei Emui and Magic UI are vulnerable to incorrect buffer size calculation, which can be exploited by attackers to impact usability...
HUAWEI EMUI Buffer Error Vulnerability
Huawei Emui is a mobile operating system developed on Android. magic Ui is a mobile operating system developed on Android. heap buffer overflow vulnerability exists in Huawei Emui and Magic UI video framework, which can be exploited by attackers to impact usability...
HUAWEI EMUI security vulnerabilities
Huawei Emui is a mobile operating system developed on Android. Magic Ui is a mobile operating system developed on Android. Huawei Emui and Magic UI are vulnerable to incorrect buffer size calculation, which can be exploited by attackers to impact usability...
Virtuozzo Hybrid Server 7.5 Update 3 (7.5.3-391)
Virtuozzo Hybrid Server 7.5 Update 3 introduces new features and provides stability and usability bug fixes. It also introduces a new kernel 3.10.0-1160.53.1.vz7.185.3. Vulnerability id: PSBM-133274 Node could crash due to an nfsd issue. Vulnerability id: PSBM-136335 Fixes for the balancing formu...
Integer overflow
In getService of IServiceManager.cpp, there is a possible unhandled exception due to an integer overflow. This could lead to local denial of service making the lockscreen unusable with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions:...
Virtuozzo Hybrid Server 7.5 Update 2 Hotfix 2 (7.5.2-464)
The Hotfix 2 for Virtuozzo Hybrid Server 7.5 Update 2 provides stability and usability bug fixes. Vulnerability id: PSBM-136189 QEMU could mark a VM QCOW2 image as corrupt. Vulnerability id: PSBM-136198 QEMU could not be updated. Vulnerability id: PSBM-136407 VCMMD needed to be properly notified ...