CVE-2022-42306

Summary: CVE-2022-42306 affects Veritas NetBackup (and related Veritas products) prior to 8.3. A local attacker can send a crafted packet to the pbx_exchange component during registration, triggering a NULL pointer dereference that crashes the pbx_exchange process (denial of service). Affected ve...

CVE-2022-42306

An issue was discovered in Veritas NetBackup through 8.2 and related Veritas products. An attacker with local access can send a crafted packet to pbxexchange during registration and cause a NULL pointer exception, effectively crashing the pbxexchange process...

CVE-2022-33887

The CVE-2022-33887 issue concerns Autodesk AutoCAD 2023 where parsing a malicious PDF can trigger an unhandled exception, potentially crashing the process, leaking data, or allowing arbitrary code execution. Multiple connected sources corroborate that the vulnerability stems from PDF parsing in A...

CVE-2022-33887

A maliciously crafted PDF file when parsed through Autodesk AutoCAD 2023 causes an unhandled exception. An attacker can leverage this vulnerability to cause a crash or read sensitive data or execute arbitrary code in the context of the current process...

OSV-2022-987 Security exception in com.code_intelligence.jazzer.sanitizers.RegexInjection.hookInternal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51941 Crash type: Security exception Crash state: com.codeintelligence.jazzer.sanitizers.RegexInjection.hookInternal com.codeintelligence.jazzer.sanitizers.RegexInjection.stringHook...

OSV-2022-963 Security exception in org.codehaus.janino.Parser.parseConditionalExpression

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51821 Crash type: Security exception Crash state: org.codehaus.janino.Parser.parseConditionalExpression java.base/sun.nio.cs.CESU8$Encoder.encodeLoop java.base/java.nio.charset.CharsetEncoder.encode...

OSV-2022-962 Security exception in com.ctc.wstx.dtd.FullDTDReader.readContentSpec

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51840 Crash type: Security exception Crash state: com.ctc.wstx.dtd.FullDTDReader.readContentSpec java.base/sun.nio.cs.CESU8.updatePositions java.base/sun.nio.cs.CESU8$Encoder.encodeArrayLoop...

GHSA-QQ29-5VJH-VXWR rdiffweb vulnerable to Improper Cleanup on Thrown Exception

rdiffweb prior to version 2.4.8 is vulnerable to Improper Cleanup on Thrown Exception. This could allow an attacker to display a message of their choice onto a web page. Version 2.4.8 contains a fix for this issue...

PT-2022-37309 · Oracle · Java.Base

Name of the Vulnerable Software and Affected Versions: java.base affected versions not specified Description: The issue is related to a security exception. Technical details about the crash include the com.ctc.wstx.dtd.FullDTDReader.readContentSpec function, and the java.base/sun.nio.cs.CESU...

CVE-2022-3301

Improper Cleanup on Thrown Exception in GitHub repository ikus060/rdiffweb prior to 2.4.8...

PYSEC-2022-295

Improper Cleanup on Thrown Exception in GitHub repository ikus060/rdiffweb prior to 2.4.8...

CVE-2022-3301 Improper Cleanup on Thrown Exception in ikus060/rdiffweb

Improper Cleanup on Thrown Exception in GitHub repository ikus060/rdiffweb prior to 2.4.8...

CVE-2022-3301 Improper Cleanup on Thrown Exception in ikus060/rdiffweb

Improper Cleanup on Thrown Exception in GitHub repository ikus060/rdiffweb prior to 2.4.8...

PT-2022-21643 · Rdiffweb · Rdiffweb

Name of the Vulnerable Software and Affected Versions: rdiffweb versions prior to 2.4.8 Description: The issue is related to improper cleanup on thrown exceptions, which could allow an attacker to display a message of their choice onto a web page. Recommendations: For versions prior to 2.4.8,...

Security Bulletin: TXSeries for Multiplatforms V7.1 : Security vulnerability in using GSKit 8 version with IBM TXSeries for Multiplatforms Version 7.1 (CVE-2013-6329)

Abstract Vulnerabilities in relation to SSL/TLS Handshake Processing related to the Session Resumption when using SSLV2 of GSKit 8 with TXSeries for Multiplatforms V7.1 have been addressed Content VULNERABILITY DETAILS: CVEID: CVE-2013-6329 DESCRIPTION: A SSLV2 ClientHello that successfully resum...

OSV-2022-942 Security exception in com.github.javaparser.ast.expr.FieldAccessExpr.accept

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51694 Crash type: Security exception Crash state: com.github.javaparser.ast.expr.FieldAccessExpr.accept com.github.javaparser.ast.visitor.VoidVisitorAdapter.visit java.base/java.lang.StringCoding.encode...

CVE-2022-35091

SWFTools commit 772e55a2 was discovered to contain a floating point exception FPE via DCTStream::readMCURow at /xpdf/Stream.cc.ow...

UBUNTU-CVE-2022-35091

SWFTools commit 772e55a2 was discovered to contain a floating point exception FPE via DCTStream::readMCURow at /xpdf/Stream.cc.ow...

CVE-2022-35091

SWFTools commit 772e55a2 was discovered to contain a floating point exception FPE via DCTStream::readMCURow at /xpdf/Stream.cc.ow...

CVE-2022-35091

SWFTools commit 772e55a2 was discovered to contain a floating point exception FPE via DCTStream::readMCURow at /xpdf/Stream.cc.ow...