PT-2022-22304

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description The frame scheduling module has a null pointer dereference issue. Successful exploitation of this issue will affect kernel availability. Recommendations A...

PT-2022-22303

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned. Description The frame scheduling module has a null pointer dereference issue. Successful exploitation of this issue will affect kernel availability. Recommendations At the moment, there is no...

CVE-2022-34736: NULL Pointer Dereference

The frame scheduling module has a null pointer dereference vulnerability. Successful exploitation of this vulnerability will affect the kernel availability...

lz4:round_trip_frame_uncompressed_fuzzer: Use-of-uninitialized-value in LZ4_compress_fast_extState_fastReset

Project: https://github.com/lz4/lz4.git Detailed Report: https://oss-fuzz.com/testcase?key=5810591549227008 Project: lz4 Fuzzing Engine: libFuzzer Fuzz Target: roundtripframeuncompressedfuzzer Job Type: libfuzzermsanlz4 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Cras...

lz4:round_trip_frame_uncompressed_fuzzer: Use-of-uninitialized-value in LZ4HC_compress_generic_noDictCtx

Project: https://github.com/lz4/lz4.git Detailed Report: https://oss-fuzz.com/testcase?key=6235198659887104 Project: lz4 Fuzzing Engine: libFuzzer Fuzz Target: roundtripframeuncompressedfuzzer Job Type: libfuzzermsanlz4 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Cras...

Security Bulletin: IBM Engineering Lifecycle Management is vulnerable to Clickjacking when X-Frame-Options, Content-Security-Policy headers are not included in the HTTP response.(CVE-2021-29865)

Summary Summary guidance: - The Jazz Team Server is vulnerable to Clickjacking. Vulnerability Details CVEID: CVE-2021-29865 DESCRIPTION: IBM Jazz Foundation could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote...

PT-2022-4950

Name of the Vulnerable Software and Affected Versions Rockwell Automation MicroLogix 1100/1400 versions 21.007 and prior Description The issue is related to the X-Frame-Options header not being configured in the HTTP response, which could allow clickjacking attacks. This could enable a remote...

HUAWEI HarmonyOS Denial of Service Vulnerability

HUAWEI HarmonyOS is an operating system from the Chinese company Huawei HUAWEI. It provides a full-scenario distributed operating system based on a microkernel. A denial of service vulnerability exists in the frame scheduling module of Huawei HarmonyOS version 2.0, which stems from a null pointer...

Rockwell Automation MicroLogix 1100 and 1400 security vulnerabilities

The Rockwell Automation MicroLogix 1400 and Rockwell Automation MicroLogix 1100 are both products of Rockwell Automation, Inc.The Rockwell Automation MicroLogix 1400 is a programmable logic controller. The Rockwell Automation MicroLogix 1400 is a programmable logic controller.The Rockwell...

UI REDRESSING

Description The web application does not restrict or incorrectly restricts frame objects or UI layers that belong to another application or domain, which can lead to user confusion about which interface the user is interacting with. Proof of Concept Go to this URL:...

HUAWEI HarmonyOS code-related vulnerabilities

HUAWEI HarmonyOS is an operating system from the Chinese company Huawei HUAWEI. It provides a full-scenario distributed operating system based on a microkernel. A denial of service vulnerability exists in the frame scheduling module of Huawei HarmonyOS version 2.0, which stems from a null pointer...

[SECURITY] Fedora 36 Update: golang-github-pierrec-lz4-4.1.3-5.fc36

Package lz4 implements reading and writing lz4 compressed data a frame, as specified in http://fastcompression.blogspot.com/2013/04/lz4-streaming-format-final.html. This package is compatible with the LZ4 frame format although the block level compression and decompression functions are exposed an...

PT-2022-37065

Name of the Vulnerable Software and Affected Versions libvp9 affected versions not specified Description The issue is related to a heap buffer overflow error. Technical details about the error include a crash type of Heap-buffer-overflow WRITE and a crash state involving functions such as init mt...

Git-clone parameter injection vulnerability

git-clone is a repository for cloning git repositories developed by Jason Frame in the UK. A parameter injection vulnerability exists in git-clone, which stems from an unsafe use of git's --upload-pack feature, which makes all versions of the package git-clone vulnerable to command injection...

UI Redressing

Description The web application does not restrict or incorrectly restricts frame objects or UI layers that belong to another application or domain, which can lead to user confusion about which interface the user is interacting with. Proof of Concept 1. Go to this URL:...

UBUNTU-CVE-2014-125022

A vulnerability was found in FFmpeg 2.0. It has been classified as problematic. Affected is the function shortendecodeframe of the component Bitstream Buffer. The manipulation leads to memory corruption. It is possible to launch the attack remotely. It is recommended to apply a patch to fix this...

UBUNTU-CVE-2014-125024

A vulnerability was found in FFmpeg 2.0. It has been rated as critical. Affected by this issue is the function lagdecodeframe. The manipulation leads to memory corruption. The attack may be launched remotely. It is recommended to apply a patch to fix this issue...

FFmpeg buffer error vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the Ffmpeg team. A code execution vulnerability exists in the FFmpeg lagdecodeframe function, which could be exploited by attackers to execute arbitrary code on the system...

PT-2022-7784

Name of the Vulnerable Software and Affected Versions FFmpeg version 2.0 Description A critical issue has been found, affecting the function lag decode frame. This issue leads to memory corruption and can be exploited remotely. Recommendations For FFmpeg version 2.0, it is recommended to apply a...

PT-2022-7782

Name of the Vulnerable Software and Affected Versions FFmpeg version 2.0 Description A vulnerability was found in the function shorten decode frame of the component Bitstream Buffer. The manipulation leads to memory corruption. It is possible to launch the attack remotely. Recommendations For...