Lucene search
+L

2032 matches found

OSS-Fuzz
OSS-Fuzz
•added 2020/09/26 7:53 p.m.•24 views

opensc:fuzz_pkcs15_reader: Stack-buffer-overflow in sc_get_response

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=4847645498277888 Project: opensc Fuzzing Engine: libFuzzer Fuzz Target: fuzzpkcs15reader Job Type: libfuzzerasanopensc Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address:...

6.8AI score
SaveExploits0Affected Software1
OSS-Fuzz
OSS-Fuzz
•added 2020/09/25 11:18 p.m.•31 views

openh264:decoder_fuzzer: Heap-buffer-overflow in WelsDec::UpdateP16x16MotionInfo

Project: https://github.com/cisco/openh264.git Detailed Report: https://oss-fuzz.com/testcase?key=5195881580855296 Project: openh264 Fuzzing Engine: libFuzzer Fuzz Target: decoderfuzzer Job Type: libfuzzerasanopenh264 Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address:...

6.8AI score
SaveExploits0Affected Software1
OSS-Fuzz
OSS-Fuzz
•added 2020/09/22 5:41 p.m.•23 views

cascadia:fuzz: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6491831037329408 Project: cascadia Fuzzing Engine: libFuzzer Fuzz Target: fuzz Job Type: libfuzzerasancascadia Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00000260f110 Crash State: NULL Sanitizer: address ASAN Recommended Securit...

6.8AI score
SaveExploits0Affected Software1
OSS-Fuzz
OSS-Fuzz
•added 2020/09/16 6:30 p.m.•45 views

fasthttp:fuzz_request: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5745696710590464 Project: fasthttp Fuzzing Engine: libFuzzer Fuzz Target: fuzzrequest Job Type: libfuzzerasanfasthttp Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00000555d7b8 Crash State: NULL Sanitizer: address ASAN Recommended...

6.8AI score
SaveExploits0Affected Software1
FreeBSD Advisory
FreeBSD Advisory
•added 2020/09/15 12:00 a.m.•55 views

FreeBSD-SA-20:28.bhyve_vmcs

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-20:28.bhyvevmcs Security Advisory The FreeBSD Project Topic: bhyve privilege escalation via VMCS access Category: core Module: bhyve Announced: 2020-09-15...

8.2CVSS7.3AI score0.00604EPSS
SaveExploits1
OSS-Fuzz
OSS-Fuzz
•added 2020/09/01 1:18 a.m.•26 views

assimp:assimp_fuzzer: Heap-buffer-overflow in =

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=4837712056811520 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerasanassimp Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

5.8AI score
SaveExploits0Affected Software1
OSS-Fuzz
OSS-Fuzz
•added 2020/08/30 4:27 p.m.•25 views

ipfs:ipfs_ds_flatfs: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5141448788541440 Project: ipfs Fuzzing Engine: libFuzzer Fuzz Target: ipfsdsflatfs Job Type: libfuzzerasanipfs Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00001c3161ef Crash State: NULL Sanitizer: address ASAN Recommended Securit...

6.8AI score
SaveExploits0Affected Software1
OSS-Fuzz
OSS-Fuzz
•added 2020/08/26 5:07 a.m.•33 views

rdkit:mol_data_stream_to_mol_fuzzer: Use-of-uninitialized-value in std::__1::vector<unsigned int, std::__1::allocator<unsigned int> >::reserve

Project: https://github.com/rdkit/rdkit.git Detailed Report: https://oss-fuzz.com/testcase?key=5762452447559680 Project: rdkit Fuzzing Engine: libFuzzer Fuzz Target: moldatastreamtomolfuzzer Job Type: libfuzzermsanrdkit Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Cras...

5.8AI score
SaveExploits0Affected Software1
Tenable Nessus
Tenable Nessus
•added 2020/08/26 12:00 a.m.•52 views

F5 Networks BIG-IP : F5 SSH server key size vulnerability (K43404629)

The version of F5 Networks BIG-IP installed on the remote host is prior to 12.1.5.2 / 13.1.3.6 / 14.1.2.4 / 15.0.1.4 / 15.1.0.5 / 16.0.0. It is, therefore, affected by a vulnerability as referenced in the K43404629 advisory. The BIG-IP and BIG-IQ host OpenSSH servers use keys less than 2048 bits...

5.9CVSS6.3AI score0.00523EPSS
SaveExploits0References2
OSS-Fuzz
OSS-Fuzz
•added 2020/08/17 2:51 p.m.•23 views

assimp:assimp_fuzzer: Crash in Assimp::FBX::ReadData

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=5637660646047744 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerubsanassimp Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00003345b4d0 Crash Stat...

5.7AI score
SaveExploits0Affected Software1
OSS-Fuzz
OSS-Fuzz
•added 2020/08/15 5:43 p.m.•114 views

golang:fuzzer-gzip: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5709295661088768 Project: golang Fuzzing Engine: libFuzzer Fuzz Target: fuzzer-gzip Job Type: libfuzzerasangolang Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash Revision:...

6.9AI score
SaveExploits0Affected Software1
NVD
NVD
•added 2020/08/12 2:15 p.m.•31 views

CVE-2020-2237

A cross-site request forgery CSRF vulnerability in Jenkins Flaky Test Handler Plugin 1.0.4 and earlier allows attackers to rebuild a project at a previous git revision...

4.3CVSS4.6AI score0.00679EPSS
SaveExploits0References2
OSV
OSV
•added 2020/08/12 2:15 p.m.•22 views

CVE-2020-2237

A cross-site request forgery CSRF vulnerability in Jenkins Flaky Test Handler Plugin 1.0.4 and earlier allows attackers to rebuild a project at a previous git revision...

4.3CVSS6.7AI score
SaveExploits0References2
Prion
Prion
•added 2020/08/12 2:15 p.m.•27 views

Cross site request forgery (csrf)

A cross-site request forgery CSRF vulnerability in Jenkins Flaky Test Handler Plugin 1.0.4 and earlier allows attackers to rebuild a project at a previous git revision...

4.3CVSS4.6AI score0.00679EPSS
SaveExploits0References2Affected Software1
Mend
Mend
•added 2020/08/12 1:25 p.m.•2 views

CVE-2020-2237

A cross-site request forgery CSRF vulnerability in Jenkins Flaky Test Handler Plugin 1.0.4 and earlier allows attackers to rebuild a project at a previous git revision...

5.3CVSS0.00679EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2020/08/12 1:25 p.m.•33 views

CVE-2020-2237

A cross-site request forgery CSRF vulnerability in Jenkins Flaky Test Handler Plugin 1.0.4 and earlier allows attackers to rebuild a project at a previous git revision...

4.5AI score0.00679EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/08/12 12:00 a.m.•6 views

CVE-2020-2237: Cross-Site Request Forgery (CSRF)

A cross-site request forgery CSRF vulnerability in Jenkins Flaky Test Handler Plugin 1.0.4 and earlier allows attackers to rebuild a project at a previous git revision...

4.3CVSS5.7AI score0.00679EPSS
SaveExploits0References2
Jenkins Security Advisories
Jenkins Security Advisories
•added 2020/08/12 12:00 a.m.•26 views

CSRF vulnerability in flaky-test-handler

flaky-test-handler 1.0.4 and earlier does not require POST requests for the "Deflake this build" feature, resulting in a cross-site request forgery CSRF vulnerability. This vulnerability allows attackers to rebuild a project at a previous git revision where the tests were failing. As of publicati...

4.3CVSS4.9AI score0.00679EPSS
SaveExploits0Affected Software1
Lenovo
Lenovo
•added 2020/08/07 3:39 p.m.•169 views

Intel Graphics Driver for Windows - Lenovo Support US

No description provided...

7.8CVSS5.9AI score0.00369EPSS
SaveExploits0
OSS-Fuzz
OSS-Fuzz
•added 2020/07/31 9:48 a.m.•34 views

go-dns:fuzz_msg_unpack: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5642061701971968 Project: go-dns Fuzzing Engine: libFuzzer Fuzz Target: fuzzmsgunpack Job Type: libfuzzerasango-dns Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00000002d140 Crash State: NULL Sanitizer: address ASAN Recommended...

6.8AI score
SaveExploits0Affected Software1
Rows per page
Query Builder