ASUS BMC Firmware 安全特征问题漏洞

ASUS BMC Firmware is a firmware from Asus China. A security signature issue vulnerability exists in ASUS BMC's firmware Web management page, which originates from a buffer overflow vulnerability due to the SMTP configuration function not validating the length of a user-entered string. A remote...

ASUS BMC Firmware 安全特征问题漏洞

ASUS BMC Firmware is a firmware from Asus China. The ASUS BMC Firmware suffers from a security signature issue vulnerability that stems from a buffer overflow vulnerability due to a specific function not validating the length of a user-entered string. A remote attacker could exploit the...

ASUS BMC Firmware 安全特征问题漏洞

ASUS BMC Firmware is a firmware from Asus China. A security signature issue vulnerability exists in the ASUS BMC Firmware Web management page, which originates from a buffer overflow vulnerability caused by the CD media configuration function not validating the length of a user-entered string. A...

fastjson2:JsonFuzzer: Uncaught exception in com.alibaba.fastjson.JSONPath.getPropertyValue

Detailed Report: https://oss-fuzz.com/testcase?key=5950804654686208 Project: fastjson2 Fuzzing Engine: libFuzzer Fuzz Target: JsonFuzzer Job Type: libfuzzerasanfastjson2 Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State: com.alibaba.fastjson.JSONPath.getPropertyValue...

fastjson2:JsonFuzzer: Uncaught exception in com.alibaba.fastjson.JSONPath.deepScan

Detailed Report: https://oss-fuzz.com/testcase?key=5532258447523840 Project: fastjson2 Fuzzing Engine: libFuzzer Fuzz Target: JsonFuzzer Job Type: libfuzzerasanfastjson2 Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State: com.alibaba.fastjson.JSONPath.deepScan...

CVE-2021-21631

Jenkins Cloud Statistics Plugin 0.26 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission and knowledge of random activity IDs to view related provisioning exception error messages...

Code injection

Jenkins Cloud Statistics Plugin 0.26 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission and knowledge of random activity IDs to view related provisioning exception error messages...

CVE-2021-21631

Jenkins Cloud Statistics Plugin 0.26 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission and knowledge of random activity IDs to view related provisioning exception error messages...

CVE-2021-21631: Missing Authorization

Jenkins Cloud Statistics Plugin 0.26 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission and knowledge of random activity IDs to view related provisioning exception error messages...

Fedora 33 : pdfbox (2021-8b17a2725e)

The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-8b17a2725e advisory. - A carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apache PDFBox version 2.0.22 and prior 2.0.x...

jackson-dataformats-binary:SmileFuzzer: Uncaught exception in com.fasterxml.jackson.dataformat.smile.SmileParser.nextToken

Project: https://github.com/FasterXML/jackson-dataformats-binary.git Detailed Report: https://oss-fuzz.com/testcase?key=4967491353837568 Project: jackson-dataformats-binary Fuzzing Engine: libFuzzer Fuzz Target: SmileFuzzer Job Type: libfuzzerasanjackson-dataformats-binary Platform Id: linux Cras...

resteasy-client: potential sensitive information leakage in JAX-RS RESTEasy Client's WebApplicationException handling

A flaw was found in the RESTEasy client in all versions of RESTEasy up to 4.5.6.Final. This flaw allows client users to obtain the server's potentially sensitive information when the server receives the WebApplicationException from the RESTEasy client call. The highest threat from this...

jackson-core:JsonFuzzer: Uncaught exception in com.fasterxml.jackson.databind.deser.std.BaseNodeDeserializer.deserializeObject

Project: https://github.com/FasterXML/jackson-core.git Detailed Report: https://oss-fuzz.com/testcase?key=4836075974557696 Project: jackson-core Fuzzing Engine: libFuzzer Fuzz Target: JsonFuzzer Job Type: libfuzzerasanjackson-core Platform Id: linux Crash Type: Uncaught exception Crash Address:...

Information Disclosure

resteasy-core is vulnerable to information disclosure. It exposes the endpoint class and method names as part of the exception response as a result of failure to convert one of the request URI path or query values to the matching JAX-RS resource method's parameter value...

jackson-dataformats-binary:SmileFuzzer: Uncaught exception in com.fasterxml.jackson.databind.deser.std.BaseNodeDeserializer.deserializeObject

Project: https://github.com/FasterXML/jackson-dataformats-binary.git Detailed Report: https://oss-fuzz.com/testcase?key=4999294596808704 Project: jackson-dataformats-binary Fuzzing Engine: libFuzzer Fuzz Target: SmileFuzzer Job Type: libfuzzerasanjackson-dataformats-binary Platform Id: linux Cras...

fastjson2:JsonFuzzer: Uncaught exception in java.base/java.util.Objects.hashCode

Detailed Report: https://oss-fuzz.com/testcase?key=4628742568804352 Project: fastjson2 Fuzzing Engine: libFuzzer Fuzz Target: JsonFuzzer Job Type: libfuzzerasanfastjson2 Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State: java.base/java.util.Objects.hashCode...

OSV-2021-570 Uncaught exception in com.fasterxml.jackson.databind.deser.std.BaseNodeDeserializer.deserializeObject

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32554 Crash type: Uncaught exception Crash state: com.fasterxml.jackson.databind.deser.std.BaseNodeDeserializer.deserializeObject java.base/java.lang.invoke.MethodHandleNatives.refKindIsField...

jackson-core:JsonFuzzer: Uncaught exception in com.fasterxml.jackson.databind.deser.std.BaseNodeDeserializer.deserializeArray

Project: https://github.com/FasterXML/jackson-core.git Detailed Report: https://oss-fuzz.com/testcase?key=6714651653046272 Project: jackson-core Fuzzing Engine: libFuzzer Fuzz Target: JsonFuzzer Job Type: libfuzzerasanjackson-core Platform Id: linux Crash Type: Uncaught exception Crash Address:...

jackson-core:JsonFuzzer: Uncaught exception in com.fasterxml.jackson.databind.deser.std.BaseNodeDeserializer.deserializeObject

Detailed Report: https://oss-fuzz.com/testcase?key=5517685405384704 Project: jackson-core Fuzzing Engine: libFuzzer Fuzz Target: JsonFuzzer Job Type: libfuzzerasanjackson-core Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State:...

OSV-2021-564 Uncaught exception in com.fasterxml.jackson.databind.deser.std.BaseNodeDeserializer.deserializeArray

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32514 Crash type: Uncaught exception Crash state: com.fasterxml.jackson.databind.deser.std.BaseNodeDeserializer.deserializeArray java.base/java.lang.Module.isStaticallyExportedOrOpen...