CVE-2020-18683

Floodlight through 1.2 has poor input validation in checkFlow in StaticFlowEntryPusherResource.java because of undefined fields mishandling...

Input validation

Floodlight through 1.2 has poor input validation in checkFlow in StaticFlowEntryPusherResource.java because of undefined fields mishandling...

CVE-2020-18683: Improper Input Validation

Floodlight through 1.2 has poor input validation in checkFlow in StaticFlowEntryPusherResource.java because of undefined fields mishandling...

CVE-2021-41558: Undefined Security Weakness

The setuser extension module before 3.0.0 for PostgreSQL allows ProcessUtilityhook bypass via setconfig...

EulerOS 2.0 SP5 : OpenEXR (EulerOS-SA-2021-2514)

According to the versions of the OpenEXR package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw found in function dataWindowForTile of IlmImf/ImfTiledMisc.cpp. An attacker who is able to submit a crafted file to be processed by OpenE...

CVE-2021-40329: Undefined Security Weakness

The Authentication API in Ping Identity PingFederate before 10.3 mishandles certain aspects of external password management...

CVE-2021-23243: Undefined Security Weakness

In Oppo's battery application, the third-party SDK provides the function of loading a third-party Provider, which can be used...

Aliased mutable references from `tls_rand` & `TlsWyRand`

TlsWyRand's implementation of Deref unconditionally dereferences a raw pointer, and returns multiple mutable references to the same object, which is undefined behavior...

PT-2021-24279

Name of the Vulnerable Software and Affected Versions: nanorand crate versions prior to 0.6.1 Description: The issue arises from the TlsWyRand implementation of Deref, which unconditionally dereferences a raw pointer and returns multiple mutable references to the same object. This behavior is...

Mozilla Rust Command Injection Vulnerability (CNVD-2021-78750)

Rust is a general-purpose, compiled programming language from the Mozilla Foundation.Mozilla Rust versions prior to 0.3.4 are vulnerable to command injection, which stems from the kekbit crate in Rust, for ShmWriter , Send is implemented without H: Send, and an attacker could exploit this...

Mozilla Rust Command Injection Vulnerability (CNVD-2021-85286)

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A command injection vulnerability exists in Mozilla Rust's schets multiqueue, which can be exploited by attackers to cause data contention errors or other undefined behavior...

Mozilla Rust Memory Corruption Vulnerability (CNVD-2021-78745)

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. Mozilla Rust suffers from a memory corruption vulnerability that can be exploited by attackers to cause undefined behavior, such as data contention...

Mozilla Rust Command Injection Vulnerability (CNVD-2021-78744)

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. Mozilla Rust is vulnerable to a command injection vulnerability that could be exploited by attackers to trigger undefined behavior and memory corruption...

CVE-2021-41382: Undefined Security Weakness

Plastic SCM before 10.0.16.5622 mishandles the WebAdmin server management interface...

CVE-2021-41326: Undefined Security Weakness

In MISP before 2.4.148, app/Lib/Export/OpendataExport.php mishandles parameter data that is used in a shellexec call...

Missing check for duplicate token in addToken

Handle 0xRajeev Vulnerability details Impact addToken does not check for token being added a duplicate of what was already added. If a duplicate token is added, removeToken only removes the first matching token and the later duplicates still remain. With the vaulttoken deleted, this may lead to...

wasm3:fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4817025503985664 Project: wasm3 Fuzzing Engine: libFuzzer Fuzz Target: fuzzer Job Type: libfuzzerubsanwasm3 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000002f20138 Crash State: NULL Sanitizer: undefined UBSAN Recommended Securit...

CVE-2021-30690: Undefined Security Weakness

Multiple issues in apache were addressed by updating apache to version 2.4.46. This issue is fixed in Security Update 2021-004 Mojave. Multiple issues in apache...

EulerOS 2.0 SP5 : ImageMagick (EulerOS-SA-2021-2334)

According to the versions of the ImageMagick packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in ImageMagick in versions before 7.0.11 and before 6.9.12, where a division by zero in WaveImage of...

CVE-2021-40540: Undefined Security Weakness

ulfiusurilogger in Ulfius HTTP Framework before 2.7.4 omits coninfo initialization and a coninfo-request NULL check for certain malformed HTTP requests...