CVE-2021-39123: Undefined Security Weakness

Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to impact the application's availability via a Denial of Service DoS vulnerability in the /rest/gadget/1.0/createdVsResolved/generate endpoint. The affected versions are before version 8.16.0...

wolfmqtt:wolfmqtt-fuzzer: Crash in Topics::Generate

Project: https://github.com/wolfSSL/wolfMQTT.git Detailed Report: https://oss-fuzz.com/testcase?key=5376382868258816 Project: wolfmqtt Fuzzing Engine: libFuzzer Fuzz Target: wolfmqtt-fuzzer Job Type: libfuzzerubsanwolfmqtt Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00200766dc38...

PT-2021-17826

Name of the Vulnerable Software and Affected Versions: ok-file-formats version 1 Description: A Heap-based Buffer Overflow issue exists via the ok jpg generate huffman table function in ok jpg.c. Recommendations: For ok-file-formats version 1, consider disabling the ok jpg generate huffman table...

Centreon SQL注入漏洞

Centreon Merethis Centreon is a set of open source system monitoring tools from the French company Centreon . The product mainly provides monitoring of network, system and application resources. A SQL injection vulnerability exists in Centreon versions prior to 20.04.14, 20.10.8, and 21.04.2. An...

PT-2021-19920

Name of the Vulnerable Software and Affected Versions DataDump versions prior to commit 67a82b76e186925330b89ace9c5fd893a300830b Description The issue concerns a lack of protection against CSRF attacks in the DataDump MediaWiki extension, allowing forged requests to generate or delete dumps. Ther...

CVE-2021-0604

In generateFileInfo of BluetoothOppSendFileInfo.java, there is a possible way to share private files over Bluetooth due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product:...

PT-2021-28350

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A crash occurred due to an unknown read issue, as reported by OSS-Fuzz. The crash involves the generate inter prediction samples function within the mc...

PT-2021-20207

Name of the Vulnerable Software and Affected Versions Dragonfly gem versions prior to 1.4.0 Description An argument injection issue allows remote attackers to read and write to arbitrary files via a crafted URL when the verify url option is disabled, potentially leading to code execution. This...

CVE-2021-28196: Buffer Copy without Checking Size of Input

The specific function in ASUS BMC’s firmware Web management page Generate SSL certificate function does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the...

PT-2021-17806

Name of the Vulnerable Software and Affected Versions: ASUS BMC affected versions not specified Description: The issue arises from a function in the ASUS BMC's firmware Web management page, specifically the Generate new certificate function, which fails to verify the string length entered by user...

Camera Component GenerateFaceMask Privilege Escalation

The vulnerability of the GenerateFaceMask function in the Camera component of Android operating systems lies in the writing of data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

CVE-2021-24174

The Database Backups WordPress plugin through 1.2.2.6 does not have CSRF checks, allowing attackers to make a logged in user unwanted actions, such as generate backups of the database, change the plugin's settings and delete backups...

PT-2021-28191

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow crash. Technical details include the crash type being a Heap-buffer-overflow WRITE and the crash state...

[SECURITY] Fedora 34 Update: gobject-introspection-1.67.1-1.fc34

GObject Introspection can scan C header and source files in order to generate introspection "typelib" files. It also provides an API to examine typelib files, useful for creating language bindings among other things...

Exploit for CVE-2021-3129

CVE-2021-3129 Laravel debug rce 食用方法 执行docker-compse up -d启动环境 访问8888端口后点击首页面的generate key就可以复现了 关于docker环境想说的几点： - 把.env.example复制到.env作用是开启debug环境 - 关闭了php.ini的phar.readonly - 在resources/view/里添加了一个hello模板并引用了一个未定义变量，同时在routes/web.php添加路由这个我加在源码里了，没写dockerfile里 复现效果 脚本已放出，脚本要和phpggc项目文件夹在同一级目录下...

CVE-2021-0465

In GenerateFaceMask of face.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroi...

PT-2021-28134

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read error. Technical details include a crash type of Heap-buffer-overflow READ 2, and the crash state...

PT-2021-13074

Name of the Vulnerable Software and Affected Versions: Android versions 8.1 through 11 Description: In Builtins::Generate ArgumentsAdaptorTrampoline of builtins-arm.cc and related files, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code...

AZL-44706 CVE-2020-16588 affecting package OpenEXR 2.3.0-6

A Null Pointer Deference issue exists in Academy Software Foundation OpenEXR 2.3.0 in generatePreview in makePreview.cpp that can cause a denial of service via a crafted EXR file...

nanorand 0.5.0 - RNGs failed to generate properly for non-64-bit numbers

In versions of nanorand prior to 0.5.1, RandomGen implementations for standard unsigned integers could fail to properly generate numbers, due to using bit-shifting to truncate a 64-bit number, rather than just an as conversion. This often manifested as RNGs returning nothing but 0, including the...