Skip to content
OpenAdvisories

Archive

17 January 2024

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Low —

    ferris-says has undefined behavior when not using UTF-8

    Affected versions receive a `&[u8]` from the caller through a safe API, and pass it directly to the unsafe `str::from_utf8_unchecked` function. The behavior of `ferris_says::say` is undefined if the bytes from the caller don't happen to be valid UTF-8. The fl…

  • Low 3.3

    Binary Planting Attack on Windows Platforms in Creditcoin

    Creditcoin is a network that enables cross-blockchain credit transactions. The Windows binary of the Creditcoin node loads a suite of DLLs provided by Microsoft at startup. If a malicious user has access to overwrite the program files directory it is possible…

  • Low 3.7

    IBM QRadar information disclosure

    IBM QRadar SIEM 7.5 could disclose sensitive email information in responses from offense rules. IBM X-Force ID: 275709.