imageio:fuzz_read: Uncaught exception in __init__

Detailed Report: https://oss-fuzz.com/testcase?key=4587344810344448 Project: imageio Fuzzing Engine: libFuzzer Fuzz Target: fuzzread Job Type: libfuzzerasanimageio Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State: init jpegfactory open Sanitizer: address ASAN Crash...

CVE-2021-20637

CVE-2021-20637 affects LOGITEC LAN-W300N/PR5B and is caused by improper check or handling of exceptional conditions. A remote attacker can trigger a denial-of-service by sending a specially crafted URL. Public details in connected sources confirm the vulnerability, its exposure over network acces...

多款华为产品 缓冲区错误漏洞

Huawei IPS Module and others are products of Huawei, China.Huawei IPS Module is an Intrusion Prevention System IPS module.NGFW Module is a Next-Generation Firewall NGFW module.Secospace USG6600 is a Next-Generation Firewall product. A memory leak vulnerability exists in multiple Huawei products...

scapy:pcap_fuzzer: Uncaught exception in _read_block_spb

Project: https://github.com/secdev/scapy.git Detailed Report: https://oss-fuzz.com/testcase?key=4742149012848640 Project: scapy Fuzzing Engine: libFuzzer Fuzz Target: pcapfuzzer Job Type: libfuzzerasanscapy Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State: readblockspb...

PT-2021-1991

Name of the Vulnerable Software and Affected Versions IntelR Graphics Drivers versions prior to 15.33.51.5146 Description The issue is related to an uncaught exception in the IntelR Graphics Drivers, which may allow an authenticated user to potentially enable denial of service via local access. I...

bleach:linkify_fuzzer: Uncaught exception in removeChild

Detailed Report: https://oss-fuzz.com/testcase?key=4616575065915392 Project: bleach Fuzzing Engine: libFuzzer Fuzz Target: linkifyfuzzer Job Type: libfuzzerubsanbleach Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State: removeChild endTagFormatting processEndTag Sanitize...

CVE-2021-25230

An improper access control vulnerability in Trend Micro Apex One on-prem and SaaS and OfficeScan XG SP1 could allow an unauthenticated user to obtain information about the contents of a scan connection exception file...

CVE-2021-25230

An improper access control vulnerability in Trend Micro Apex One on-prem and SaaS and OfficeScan XG SP1 could allow an unauthenticated user to obtain information about the contents of a scan connection exception file...

Fedora 32 : jasper (2021-0a6290f865)

The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-0a6290f865 advisory. - The JPCNOMINALGAIN function in jpc/jpct1cod.c in JasPer through 2.0.12 allows remote attackers to cause a denial of service JPCCOXRFT assertion...

CVE-2021-25230: Undefined Security Weakness

An improper access control vulnerability in Trend Micro Apex One on-prem and SaaS and OfficeScan XG SP1 could allow an unauthenticated user to obtain information about the contents of a scan connection exception file...

PT-2021-16468

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex One on-prem and SaaS versions not specified OfficeScan XG SP1 version not specified Description: An improper access control issue could allow an unauthenticated user to obtain information about the contents of a scan connecti...

resteasy-client: potential sensitive information leakage in JAX-RS RESTEasy Client's WebApplicationException handling

A flaw was found in the RESTEasy client in all versions of RESTEasy up to 4.5.6.Final. This flaw allows client users to obtain the server's potentially sensitive information when the server receives the WebApplicationException from the RESTEasy client call. The highest threat from this...

resteasy-client: potential sensitive information leakage in JAX-RS RESTEasy Client's WebApplicationException handling

A flaw was found in the RESTEasy client in all versions of RESTEasy up to 4.5.6.Final. This flaw allows client users to obtain the server's potentially sensitive information when the server receives the WebApplicationException from the RESTEasy client call. The highest threat from this...

openSUSE Security Update : gcc7 (openSUSE-2020-2300)

This update for gcc7 fixes the following issues : - CVE-2020-13844: Added mitigation for aarch64 Straight Line Speculation issue bsc1172798 - Enable fortran for the nvptx offload compiler. - Update README.First-for.SuSE.packagers - avoid assembler errors with AVX512 gather and scatter instruction...

openSUSE Security Update : gcc7 (openSUSE-2020-2301)

This update for gcc7 fixes the following issues : - CVE-2020-13844: Added mitigation for aarch64 Straight Line Speculation issue bsc1172798 - Enable fortran for the nvptx offload compiler. - Update README.First-for.SuSE.packagers - avoid assembler errors with AVX512 gather and scatter instruction...

bleach:linkify_fuzzer: Uncaught exception in generateImpliedEndTags

Detailed Report: https://oss-fuzz.com/testcase?key=5014421988573184 Project: bleach Fuzzing Engine: libFuzzer Fuzz Target: linkifyfuzzer Job Type: libfuzzerasanbleach Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State: generateImpliedEndTags generateImpliedEndTags...

bleach:sanitize_fuzzer: Uncaught exception in convert_entity

Project: https://github.com/mozilla/bleach.git Detailed Report: https://oss-fuzz.com/testcase?key=6267753038217216 Project: bleach Fuzzing Engine: libFuzzer Fuzz Target: sanitizefuzzer Job Type: libfuzzerasanbleach Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State:...

bleach:linkify_fuzzer: Uncaught exception in convert_entity

Project: https://github.com/mozilla/bleach.git Detailed Report: https://oss-fuzz.com/testcase?key=5206680075894784 Project: bleach Fuzzing Engine: libFuzzer Fuzz Target: linkifyfuzzer Job Type: libfuzzerubsanbleach Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State:...

httplib2:fuzz_request: Uncaught exception in fuzz_request.pkg

Detailed Report: https://oss-fuzz.com/testcase?key=5397216636305408 Project: httplib2 Fuzzing Engine: libFuzzer Fuzz Target: fuzzrequest Job Type: libfuzzerasanhttplib2 Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State: fuzzrequest.pkg fuzzrequest.pkg fuzzrequest.pkg...

Backdoor.Win32.Xel Remote Authentication Buffer Overflow

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/3648c68bfe395fb9980ae547d881572c.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Xel Vulnerability: Remote Authentication Buffer Overflow Description: Xel listens on...