PT-2018-4122

Name of the Vulnerable Software and Affected Versions obs-service-set version versions prior to 0.5.3-1.1 Description The issue concerns the set version script in obs-service-set version, which is a source validator for the Open Build Service OBS. This script did not properly sanitize user input,...

Design/Logic Flaw

Hyperledger Iroha versions v1.0beta and v1.0.0beta-1 are vulnerable to transaction and block signature verification bypass in the transaction and block validator allowing a single node to sign a transaction and/or block multiple times, each with a random nonce, and have other validating nodes...

CVE-2018-3756

Hyperledger Iroha versions v1.0beta and v1.0.0beta-1 are vulnerable to transaction and block signature verification bypass in the transaction and block validator allowing a single node to sign a transaction and/or block multiple times, each with a random nonce, and have other validating nodes...

PYSEC-2018-150

Hyperledger Iroha versions v1.0beta and v1.0.0beta-1 are vulnerable to transaction and block signature verification bypass in the transaction and block validator allowing a single node to sign a transaction and/or block multiple times, each with a random nonce, and have other validating nodes...

PYSEC-2018-150

Hyperledger Iroha versions v1.0beta and v1.0.0beta-1 are vulnerable to transaction and block signature verification bypass in the transaction and block validator allowing a single node to sign a transaction and/or block multiple times, each with a random nonce, and have other validating nodes...

CVE-2018-3756

Hyperledger Iroha versions v1.0_beta and v1.0.0_beta-1 are vulnerable to a transaction and block signature verification bypass in the transaction and block validator. This flaw allows a single node to sign a transaction and/or block multiple times, each with a random nonce, and have other validat...

CVE-2018-3756

Hyperledger Iroha versions v1.0beta and v1.0.0beta-1 are vulnerable to transaction and block signature verification bypass in the transaction and block validator allowing a single node to sign a transaction and/or block multiple times, each with a random nonce, and have other validating nodes...

CVE-2018-3756

Hyperledger Iroha versions v1.0beta and v1.0.0beta-1 are vulnerable to transaction and block signature verification bypass in the transaction and block validator allowing a single node to sign a transaction and/or block multiple times, each with a random nonce, and have other validating nodes...

PT-2018-19205

Name of the Vulnerable Software and Affected Versions Hyperledger Iroha versions v1.0 beta through v1.0.0 beta-1 Description The issue allows a single node to bypass transaction and block signature verification in the transaction and block validator. This can be achieved by signing a transaction...

PT-2018-16177

Name of the Vulnerable Software and Affected Versions Hyperledger Iroha versions v1.0 beta through v1.0.0 beta-1 Description The issue allows a single node to bypass transaction and block signature verification in the transaction and block validator. This can be achieved by signing a transaction...

Remote Code Execution Vulnerability in Multiple TP-LINK Products

TP-LINK IPC TL-IPC223P-6 and so on are all different models of network camera products from China P&L TP-LINK. A remote code execution vulnerability exists in multiple TP-LINK products, which originates from the /usr/lib/lua/luci/torchlight/validator.lua file receiving multiple punctuation...

CVE-2018-3756: Improper Verification of Cryptographic Signature

Hyperledger Iroha versions v1.0beta and v1.0.0beta-1 are vulnerable to transaction and block signature verification bypass in the transaction and block validator allowing a single node to sign a transaction and/or block multiple times, each with a random nonce, and have other validating nodes...

CVE-2016-10521

jshamcrest is vulnerable to regular expression denial of service ReDoS when certain types of user input is passed in to the emailAddress validator...

CVE-2016-10521

jshamcrest is vulnerable to regular expression denial of service ReDoS when certain types of user input is passed in to the emailAddress validator...

CVE-2016-10521

jshamcrest is vulnerable to regular expression denial of service ReDoS when certain types of user input is passed in to the emailAddress validator...

CVE-2016-10521

The CVE-2016-10521 issue affects the jshamcrest library, specifically the emailAddress validator. The underlying vulnerability is a regular expression denial of service (ReDoS) caused by certain user inputs, with PoC details showing heavy input can block the event loop. Documented impact indicate...

CVE-2016-10521

jshamcrest is vulnerable to regular expression denial of service ReDoS when certain types of user input is passed in to the emailAddress validator...

PT-2018-4701

Name of the Vulnerable Software and Affected Versions jshamcrest affected versions not specified Description The issue concerns a regular expression denial of service ReDoS vulnerability. It occurs when certain types of user input are passed to the emailAddress validator. This can cause a denial ...

CVE-2016-10521: Uncontrolled Resource Consumption

jshamcrest is vulnerable to regular expression denial of service ReDoS when certain types of user input is passed in to the emailAddress validator...

CVE-2018-11481

TP-LINK IPC TL-IPC223P-6, TL-IPC323K-D, TL-IPC325KP-, and TL-IPC40A-4 devices allow authenticated remote code execution via crafted JSON data because /usr/lib/lua/luci/torchlight/validator.lua does not block various punctuation characters...