OSV-2021-1463 UNKNOWN READ in helper_be_stw_mmu_armeb

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40073 Crash type: UNKNOWN READ Crash state: helperbestwmmuarmeb...

OSV-2021-1458 Global-buffer-overflow in fr_base16_decode_nstd

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39986 Crash type: Global-buffer-overflow READ 1 Crash state: frbase16decodenstd frvalueboxfromstr utildecodeproto...

OSV-2021-1457 Heap-buffer-overflow in generic_unpack

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39996 Crash type: Heap-buffer-overflow READ 4 Crash state: genericunpack exrdecodingrun Imf31::checkCoreFile...

OSV-2021-1455 Heap-buffer-overflow in mrb_funcall_with_block

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39940 Crash type: Heap-buffer-overflow WRITE 8 Crash state: mrbfuncallwithblock mrbfuncallargv constget...

OSV-2021-1454 Uncaught exception in org.jsoup.parser.HtmlTreeBuilder.process

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39939 Crash type: Uncaught exception Crash state: org.jsoup.parser.HtmlTreeBuilder.process org.jsoup.parser.HtmlTreeBuilderState$9.process org.jsoup.parser.HtmlTreeBuilder.process...

OSV-2021-1453 Heap-buffer-overflow in mrb_funcall_with_block

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39931 Crash type: Heap-buffer-overflow WRITE 8 Crash state: mrbfuncallwithblock mrbfuncallid mrbequal...

OSV-2021-1452 Heap-buffer-overflow in mrb_funcall_with_block

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39937 Crash type: Heap-buffer-overflow WRITE 8 Crash state: mrbfuncallwithblock mrbinstancenew mrbfuncallwithblock...

OSV-2021-1451 Heap-buffer-overflow in Imf_3_1::memstream_read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39936 Crash type: Heap-buffer-overflow WRITE 1 Crash state: Imf31::memstreamread dispatchread readuncompresseddirect...

OSV-2021-1450 UNKNOWN READ in helper_uc_tracecode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39944 Crash type: UNKNOWN READ Crash state: helpeructracecode...

OSV-2021-1448 Heap-buffer-overflow in mrb_vm_exec

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39947 Crash type: Heap-buffer-overflow WRITE 8 Crash state: mrbvmexec mrbvmrun mrbtoprun...

OSV-2021-1449 UNKNOWN WRITE in void QtPrivate::QPodArrayOps<QPainterPath::Element>::emplace<QPainterPath::Eleme

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39957 Crash type: UNKNOWN WRITE Crash state: void QtPrivate::QPodArrayOps::emplaceQPainterPath::Eleme QPainterPath::lineTo QOutlineMapper::clipElements...

CVE-2021-32571

In OSS-RC systems of the release 18B and older during data migration procedures certain files containing usernames and passwords are left in the system undeleted but in folders accessible by top privileged accounts only. NOTE: This vulnerability only affects products that are no longer supported ...

CVE-2021-32571

In OSS-RC systems of the release 18B and older during data migration procedures certain files containing usernames and passwords are left in the system undeleted but in folders accessible by top privileged accounts only. NOTE: This vulnerability only affects products that are no longer supported ...

CVE-2021-32571

In OSS-RC systems of the release 18B and older during data migration procedures certain files containing usernames and passwords are left in the system undeleted but in folders accessible by top privileged accounts only. NOTE: This vulnerability only affects products that are no longer supported ...

Code injection

UNSUPPORTED WHEN ASSIGNED In OSS-RC systems of the release 18B and older during data migration procedures certain files containing usernames and passwords are left in the system undeleted but in folders accessible by top privileged accounts only. NOTE: This vulnerability only affects products tha...

CVE-2021-32569

In OSS-RC systems of the release 18B and older customer documentation browsing libraries under ALEX are subject to Cross-Site Scripting. This problem is completely resolved in new Ericsson library browsing tool ELEX used in systems like Ericsson Network Manager. NOTE: This vulnerability only...

CVE-2021-32569

In OSS-RC systems of the release 18B and older customer documentation browsing libraries under ALEX are subject to Cross-Site Scripting. This problem is completely resolved in new Ericsson library browsing tool ELEX used in systems like Ericsson Network Manager. NOTE: This vulnerability only...

Cross site scripting

UNSUPPORTED WHEN ASSIGNED In OSS-RC systems of the release 18B and older customer documentation browsing libraries under ALEX are subject to Cross-Site Scripting. This problem is completely resolved in new Ericsson library browsing tool ELEX used in systems like Ericsson Network Manager. NOTE: Th...

CVE-2021-32571

In OSS-RC systems of the release 18B and older during data migration procedures certain files containing usernames and passwords are left in the system undeleted but in folders accessible by top privileged accounts only. NOTE: This vulnerability only affects products that are no longer supported ...

CVE-2021-32571

CVE-2021-32571 affects OSS-RC systems (release 18B and older). The issue arises during data migration, where files containing usernames and passwords are left undeleted yet reside in folders accessible by top-privileged accounts. Impact is described as exposure to partially confidential data due ...