Xstream Arbitrary File Deletion Vulnerability

XStream is a lightweight , easy to use open source Java class library of the XStream team , it is mainly used to serialize objects into XML JSON or deserialize objects . An arbitrary file deletion vulnerability exists in XStream. The vulnerability stems from an exception handling during...

Server-Side Request Forgery (SSRF)

apacheairflow is vulnerable to server-side request forgery SSRF. The vulnerability exists through the lack of sanitization of exception messages when SQL execution fails...

XStream 操作系统命令注入漏洞

XStream is a lightweight , easy to use open source Java class library of the XStream team , it is mainly used to serialize objects into XML JSON or deserialize objects . An arbitrary file deletion vulnerability exists in XStream. The vulnerability stems from an exception handling during...

ujson:json_differential_fuzzer: Uncaught exception in __strcat_chk

Detailed Report: https://oss-fuzz.com/testcase?key=5982114704785408 Project: ujson Fuzzing Engine: libFuzzer Fuzz Target: jsondifferentialfuzzer Job Type: libfuzzerubsanujson Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State: strcatchk strcatchk strcatchk Sanitizer:...

CVE-2020-5665

Improper check or handling of exceptional conditions in MELSEC iQ-F series FX5UC CPU unit firmware version 1.060 and earlier allows an attacker to cause a denial-of-service DoS condition on program execution and communication by sending a specially crafted ARP packet...

ujson:json_differential_fuzzer: Uncaught exception in json_differential_fuzzer.pkg

Detailed Report: https://oss-fuzz.com/testcase?key=5660519021281280 Project: ujson Fuzzing Engine: libFuzzer Fuzz Target: jsondifferentialfuzzer Job Type: libfuzzerasanujson Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State: jsondifferentialfuzzer.pkg...

ujson:ujson_fuzzer: Uncaught exception in ujson_fuzzer.pkg

Detailed Report: https://oss-fuzz.com/testcase?key=5634157669646336 Project: ujson Fuzzing Engine: libFuzzer Fuzz Target: ujsonfuzzer Job Type: libfuzzerasanujson Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State: ujsonfuzzer.pkg ujsonfuzzer.pkg ujsonfuzzer.pkg Sanitize...

pygments:pygments_fuzzer: Uncaught exception in get_tokens_unprocessed

Project: https://github.com/pygments/pygments.git Detailed Report: https://oss-fuzz.com/testcase?key=6315993056018432 Project: pygments Fuzzing Engine: libFuzzer Fuzz Target: pygmentsfuzzer Job Type: libfuzzerasanpygments Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash Stat...

Misubishi Electric MELSEC iQ-F series Security Vulnerability

The Misubishi Electric MELSEC iQ-F series is a programmable logic controller from Misubishi Electric Japan. A security vulnerability exists in the MELSEC iQ-F series, which can be exploited by an attacker to cause a denial of service, due to improper checking or handling of an exception by the...

CVE-2020-29657

In JerryScript 2.3.0, there is an out-of-bounds read in mainprintunhandledexception in the main-utils.c file...

PT-2020-17237

Name of the Vulnerable Software and Affected Versions JerryScript version 2.3.0 Description The issue is related to an out-of-bounds read in the main print unhandled exception function located in the main-utils.c file. Recommendations For JerryScript version 2.3.0, at the moment, there is no...

SUSE SLES12 Security Update : java-11-openjdk (SUSE-SU-2020:3159-1)

"This update for java-11-openjdk fixes the following issues : Update to upstream tag jdk-11.0.9-11 October 2020 CPU, bsc1177943 - New features + JDK-8250784: Shenandoah: A Low-Pause-Time Garbage Collector - Security fixes + JDK-8233624: Enhance JNI linkage + JDK-8236196: Improve string pooling +...

NewStart CGSL CORE 5.04 / MAIN 5.04 : net-snmp Vulnerability (NS-SA-2020-0063)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has net-snmp packages installed that are affected by a vulnerability: - snmpoidcompare in snmplib/snmpapi.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an unauthenticated attacker to remotely cau...

Code injection

in SetImageExtent of /MagickCore/image.c, an incorrect image depth size can cause a memory leak because the code which checks for the proper image depth size does not reset the size in the event there is an invalid size. The patch resets the depth to a proper size before throwing an exception. Th...

Siemens SIMATIC Controller Web Servers

1. EXECUTIVE SUMMARY CVSS v3 5.3 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Siemens Equipment: SIMATIC Controller Web Servers Vulnerability: Uncaught Exception 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to cause a...

GitHub Security Lab: Java: CWE-600 Uncaught servlet exception

This bug was reported directly to GitHub Security Lab...

CVE-2020-29561

An issue was discovered in SonicBOOM riscv-boom 3.0.0. For LR, it does not avoid acquiring a reservation in the case where a load translates successfully but still generates an exception...

Design/Logic Flaw

An issue was discovered in SonicBOOM riscv-boom 3.0.0. For LR, it does not avoid acquiring a reservation in the case where a load translates successfully but still generates an exception...

CVE-2020-29561

An issue was discovered in SonicBOOM riscv-boom 3.0.0. For LR, it does not avoid acquiring a reservation in the case where a load translates successfully but still generates an exception...

CVE-2020-29561

CVE-2020-29561 affects SonicBOOM riscv-boom 3.0.0. The issue occurs for the LR path where a load translation can complete but still generate an exception, and the system does not avoid acquiring a reservation in that case. This relies on a specific low-level condition in the load/exception handli...