2001 matches found
SUSE CVE-2020-1759
A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2 where, A nonce reuse vulnerability was discovered in the secure mode of the messenger v2 protocol, which can allow an attacker to forge auth tags and potentially manipulate the data by leveraging the...
SUSE CVE-2020-11810
An issue was discovered in OpenVPN 2.4.x before 2.4.9. An attacker can inject a data channel v2 PDATAV2 packet using a victim's peer-id. Normally such packets are dropped, but if this packet arrives before the data channel crypto parameters have been initialized, the victim's connection will be...
SUSE CVE-2021-28703
grant table v2 status pages may remain accessible after de-allocation take two Guest get permitted access to certain Xen-owned pages of memory. The majority of such pages remain allocated / associated with a guest for its entire lifetime. Grant table v2 status pages, however, get de-allocated whe...
SUSE CVE-2022-1664
Dpkg::Source::Archive in dpkg, the Debian package management system, before version 1.21.8, 1.20.10, 1.19.8, 1.18.26 is prone to a directory traversal vulnerability. When extracting untrusted source packages in v2 and v3 source package formats that include a debian.tar, the in-place extraction ca...
SUSE CVE-2022-36003
TensorFlow is an open source platform for machine learning. When RandomPoissonV2 receives large input shape and rates, it gives a CHECK fail that can trigger a denial of service attack. We have patched the issue in GitHub commit 552bfced6ce4809db5f3ca305f60ff80dd40c5a3. The fix will be included i...
The vulnerability in the strcmp() function of the httpd daemon of the microprogrammed router software for TP-Link Archer C5 version 2 and TP-Link WR710N version 1 allows a hacker to gain unauthorized access to protected information.
The vulnerability of the strcmp function in the httpd daemon of TP-Link Archer C5 version 2 and TP-Link WR710N version 1 is related to the creation of a secondary synchronization channel due to time differences. Exploiting this vulnerability can allow an attacker to gain unauthorized access to...
GemFetch (>=0.1.3 <=0.1.6), MFEKmath (>=0.1.0 <=0.1.1) +2937 more potentially affected by unknown CVE via safemem (>=0.1.1 <=0.3.3)
safemem CARGO version =0.1.1, =0.1.3, =0.1.0, =0.1.0, =0.1.0, =0.8.16, =0.2.0, =0.1.1, =0.1.0, =0.0.6, =0.0.7-alpha.3, =0.0.7-alpha.1, =0.1.0, =0.9.2, =0.9.3 - acme2-slim =0.2.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0081...
GO-2023-1535 Panic during unmarshal of Server Hello in github.com/pion/dtls/v2
Unmarshalling a Server Hello can panic, which could allow a denial of service...
GHSA-4XGV-J62Q-H3RJ Panic during unmarshal of Hello Verify Request in github.com/pion/dtls/v2
Impact During the unmarshalling of a hello verify request we could try to unmarshal into too small a buffer. is could result in a panic leading the program to crash. This issue could be abused to cause a denial of service. Workaround None, upgrade to 2.2.4...
GHSA-HXP2-XQF3-V83H Panic during unmarshal of Hello Verify Request in github.com/pion/dtls/v2
Impact When attempting to unmarshal a Server Hello request we could attempt to unmarshal into a buffer that was too small. This could result in a panic leading the program to crash. This issue could be abused to cause a denial of service. Workaround None...
Panic during unmarshal of Hello Verify Request in github.com/pion/dtls/v2
Impact When attempting to unmarshal a Server Hello request we could attempt to unmarshal into a buffer that was too small. This could result in a panic leading the program to crash. This issue could be abused to cause a denial of service. Workaround None...
FIRST ERC4626 DEPOSIT CAN BE EXPLOITED ON SHARE CALCULATION
Lines of code Vulnerability details Impact As also encountered by Uniswap V2 and other protocols, the first depositor of an ERC4626 vault can maliciously manipulate the share price by depositing as low as 1 wei of liquidity prior to deliberately inflating ERC4626.totalAssets to as high as 1:1e18...
First depositor can break minting of shares
Lines of code Vulnerability details Vulnerability details The calculation of exchange rate for shares in Popcorn Vault is done by dividing the total supply of shares by the totalAssets of the vault. The first depositor can mint a very small number of shares, then donate to the vault to manipulate...
Cross site scripting
Online Food Ordering System v2 was discovered to contain a cross-site scripting XSS vulnerability via the redirect parameter in login.php...
CVE-2023-24197
CVE-2023-24197 concerns Online Food Ordering System v2, where a SQL injection exists in the view_order.php endpoint via the id parameter. The root cause is insufficient validation of externally supplied SQL statements, allowing potentially unauthorized database access and data exposure as indicat...
CVE-2023-24195
CVE-2023-24195 affects Online Food Ordering System v2. The issue is a cross-site scripting (XSS) vulnerability exploitable via the page parameter in index.php, caused by lack of proper filtering/escaping of user-supplied data. According to the CVE details, it has a CVSS v3.1 base score of 6.1 (ME...
PT-2023-19470 · Unknown · Online Food Ordering System
Name of the Vulnerable Software and Affected Versions: Online Food Ordering System version v2 Description: The issue is related to a cross-site scripting XSS vulnerability. This vulnerability can be exploited via the page parameter in the "index.php" endpoint. Recommendations: For Online Food...
CVE-2023-24194
Online Food Ordering System v2 was discovered to contain a cross-site scripting XSS vulnerability via the page parameter in navbar.php...
CVE-2023-24194
CVE-2023-24194 affects Online Food Ordering System v2. A cross-site scripting (XSS) vulnerability exists in the navbar.php page parameter, enabling injection of malicious scripts. Core details: the flaw is tied to the page parameter handling in navbar.php; CVSS 3.1 base score 6.1 (MEDIUM) with us...
