Lucene search
+L

110 matches found

OSS-Fuzz
OSS-Fuzz
•added 2023/02/02 10:19 p.m.•15 views

spring-data-keyvalue:KeyValueTemplateFuzzer: Security exception in java.base/java.lang.String.join

Project: https://github.com/spring-projects/spring-data-keyvalue.git Detailed Report: https://oss-fuzz.com/testcase?key=6318633757573120 Project: spring-data-keyvalue Fuzzing Engine: libFuzzer Fuzz Target: KeyValueTemplateFuzzer Job Type: libfuzzerasanspring-data-keyvalue Platform Id: linux Crash...

5.9AI score
SaveExploits0
OSS-Fuzz
OSS-Fuzz
•added 2023/01/10 8:32 p.m.•37 views

spring-data-keyvalue:KeyValueTemplateFuzzer: Security exception in java.base/java.util.StringJoiner.checkAddLength

Project: https://github.com/spring-projects/spring-data-keyvalue.git Detailed Report: https://oss-fuzz.com/testcase?key=5056359362330624 Project: spring-data-keyvalue Fuzzing Engine: libFuzzer Fuzz Target: KeyValueTemplateFuzzer Job Type: libfuzzerasanspring-data-keyvalue Platform Id: linux Crash...

5.9AI score
SaveExploits0
OSS-Fuzz
OSS-Fuzz
•added 2022/11/14 5:51 p.m.•19 views

spring-data-keyvalue:KeyValueTemplateFuzzer: Security exception in java.base/java.util.Arrays.copyOf

Project: https://github.com/spring-projects/spring-data-keyvalue.git Detailed Report: https://oss-fuzz.com/testcase?key=6472628219281408 Project: spring-data-keyvalue Fuzzing Engine: libFuzzer Fuzz Target: KeyValueTemplateFuzzer Job Type: libfuzzerasanspring-data-keyvalue Platform Id: linux Crash...

5.9AI score
SaveExploits0
OSS-Fuzz
OSS-Fuzz
•added 2022/11/13 3:05 p.m.•9 views

spring-data-keyvalue:KeyValueTemplateFuzzer: Security exception with empty stacktrace

Project: https://github.com/spring-projects/spring-data-keyvalue.git Detailed Report: https://oss-fuzz.com/testcase?key=5832020072988672 Project: spring-data-keyvalue Fuzzing Engine: libFuzzer Fuzz Target: KeyValueTemplateFuzzer Job Type: libfuzzerasanspring-data-keyvalue Platform Id: linux Crash...

5.9AI score
SaveExploits0
OSS-Fuzz
OSS-Fuzz
•added 2022/11/11 9:23 p.m.•29 views

spring-data-keyvalue:KeyValueTemplateFuzzer: Security exception in java.base/java.lang.StringLatin1.toChars

Project: https://github.com/spring-projects/spring-data-keyvalue.git Detailed Report: https://oss-fuzz.com/testcase?key=6328792734105600 Project: spring-data-keyvalue Fuzzing Engine: libFuzzer Fuzz Target: KeyValueTemplateFuzzer Job Type: libfuzzerasanspring-data-keyvalue Platform Id: linux Crash...

5.9AI score
SaveExploits0
OSS-Fuzz
OSS-Fuzz
•added 2022/11/09 2:17 p.m.•26 views

spring-data-keyvalue:KeyValueTemplateFuzzer: Security exception in java.base/java.util.regex.Pattern$Ques.match

Project: https://github.com/spring-projects/spring-data-keyvalue.git Detailed Report: https://oss-fuzz.com/testcase?key=5460015372959744 Project: spring-data-keyvalue Fuzzing Engine: libFuzzer Fuzz Target: KeyValueTemplateFuzzer Job Type: libfuzzerasanspring-data-keyvalue Platform Id: linux Crash...

5.9AI score
SaveExploits0
OSS-Fuzz
OSS-Fuzz
•added 2022/11/09 1:48 p.m.•9 views

spring-data-keyvalue:KeyValueTemplateFuzzer: Security exception in java.base/java.util.regex.Pattern$Ques.match

Detailed Report: https://oss-fuzz.com/testcase?key=4860083301646336 Project: spring-data-keyvalue Fuzzing Engine: libFuzzer Fuzz Target: KeyValueTemplateFuzzer Job Type: libfuzzerasanspring-data-keyvalue Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

5.9AI score
SaveExploits0
OSS-Fuzz
OSS-Fuzz
•added 2022/11/08 1:37 p.m.•17 views

spring-data-keyvalue:KeyValueTemplateFuzzer: Security exception in com.code_intelligence.jazzer.sanitizers.RegexInjection.hookInternal

Project: https://github.com/spring-projects/spring-data-keyvalue.git Detailed Report: https://oss-fuzz.com/testcase?key=5685393655988224 Project: spring-data-keyvalue Fuzzing Engine: libFuzzer Fuzz Target: KeyValueTemplateFuzzer Job Type: libfuzzerasanspring-data-keyvalue Platform Id: linux Crash...

5.9AI score
SaveExploits0
OSS-Fuzz
OSS-Fuzz
•added 2022/11/08 1:11 p.m.•18 views

spring-data-keyvalue:KeyValueTemplateFuzzer: Security exception in java.base/jdk.internal.misc.Unsafe.allocateUninitializedArray0

Project: https://github.com/spring-projects/spring-data-keyvalue.git Detailed Report: https://oss-fuzz.com/testcase?key=5153566394548224 Project: spring-data-keyvalue Fuzzing Engine: libFuzzer Fuzz Target: KeyValueTemplateFuzzer Job Type: libfuzzerasanspring-data-keyvalue Platform Id: linux Crash...

5.9AI score
SaveExploits0
OSS-Fuzz
OSS-Fuzz
•added 2022/11/08 12:58 p.m.•12 views

spring-data-keyvalue:KeyValueTemplateFuzzer: Security exception in java.base/java.lang.String.repeat

Project: https://github.com/spring-projects/spring-data-keyvalue.git Detailed Report: https://oss-fuzz.com/testcase?key=4959233536032768 Project: spring-data-keyvalue Fuzzing Engine: libFuzzer Fuzz Target: KeyValueTemplateFuzzer Job Type: libfuzzerasanspring-data-keyvalue Platform Id: linux Crash...

5.9AI score
SaveExploits0
attackerkb
attackerkb
•added 2022/06/16 12:15 p.m.•8 views

CVE-2021-41654

SQL injection vulnerabilities exist in Wuzhicms v4.1.0 which allows attackers to execute arbitrary SQL commands via the $keyValue parameter in /coreframe/app/pay/admin/index.php...

9.8CVSS7.6AI score0.01064EPSS
SaveExploits1References2
NVD
NVD
•added 2022/06/16 12:15 p.m.•42 views

CVE-2021-41654

SQL injection vulnerabilities exist in Wuzhicms v4.1.0 which allows attackers to execute arbitrary SQL commands via the $keyValue parameter in /coreframe/app/pay/admin/index.php...

9.8CVSS0.01064EPSS
SaveExploits1References1
Prion
Prion
•added 2022/06/16 12:15 p.m.•26 views

Sql injection

SQL injection vulnerabilities exist in Wuzhicms v4.1.0 which allows attackers to execute arbitrary SQL commands via the $keyValue parameter in /coreframe/app/pay/admin/index.php...

7.5CVSS10AI score0.01064EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2022/06/16 11:22 a.m.•51 views

CVE-2021-41654

SQL injection vulnerabilities exist in Wuzhicms v4.1.0 which allows attackers to execute arbitrary SQL commands via the $keyValue parameter in /coreframe/app/pay/admin/index.php...

10AI score0.01064EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/16 12:00 a.m.•9 views

CVE-2021-41654: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerabilities exist in Wuzhicms v4.1.0 which allows attackers to execute arbitrary SQL commands via the $keyValue parameter in /coreframe/app/pay/admin/index.php...

9.8CVSS8.6AI score0.01064EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/06/16 12:00 a.m.•6 views

PT-2022-11453

Name of the Vulnerable Software and Affected Versions Wuzhicms version 4.1.0 Description The issue allows attackers to execute arbitrary SQL commands via the keyValue parameter in the "/coreframe/app/pay/admin/index.php" API endpoint. This enables attackers to manipulate database queries,...

9.8CVSS0.01064EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
•added 2022/04/13 12:00 a.m.•28 views

LibreOffice Cryptographic Signature Verification

The vulnerability of the LibreOffice office software package is related to incorrect verification of the cryptographic signature when using the “X509Data” and “KeyValue” values. Exploiting this vulnerability can allow an attacker to circumvent security restrictions by using a specially created OD...

6.3CVSS7.4AI score0.00954EPSS
SaveExploits0References12Affected Software5
Prion
Prion
•added 2022/02/24 3:15 p.m.•101 views

Input validation

LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occurred since the last signing and that the signature is valid. An Improper Certificate Validation vulnerability in LibreOffice allowed an attacker to...

5CVSS7.3AI score0.00954EPSS
SaveExploits0References3Affected Software2
UbuntuCve
UbuntuCve
•added 2022/02/24 3:15 p.m.•54 views

CVE-2021-25636

LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occurred since the last signing and that the signature is valid. An Improper Certificate Validation vulnerability in LibreOffice allowed an attacker to...

7.5CVSS7.2AI score0.00954EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2021/09/20 3:15 p.m.•22 views

CVE-2021-40674

An SQL injection vulnerability exists in Wuzhi CMS v4.1.0 via the KeyValue parameter in coreframe/app/order/admin/index.php...

9.8CVSS8.2AI score
SaveExploits0References1
Rows per page
Query Builder