16280 matches found
PT-2024-37025
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the nsim pp hold write function in the Linux kernel's netdevsim module. This function has two problems: 1 It may return with rtnl held, as found by syzbot. 2 Its...
BIT-NODE-MIN-2021-44533
Node.js 12.22.9, 14.18.3, 16.13.2, and 17.3.1 did not handle multi-value Relative Distinguished Names correctly. Attackers could craft certificate subjects containing a single-value Relative Distinguished Name that would be interpreted as a multi-value Relative Distinguished Name, for example, in...
ffmpeg:ffmpeg_dem_WTV_fuzzer: Use-of-uninitialized-value in ff_parse_mpeg2_descriptor
Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5144130618982400 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegdemWTVfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...
ffmpeg:ffmpeg_DEMUXER_fuzzer: Use-of-uninitialized-value in av_strdup
Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5380168801124352 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegDEMUXERfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...
pkcs15-init personalization libopensc Data Compromise
The vulnerability of the pkcs15-init personalization utility and the libopensc library related to the OpenSC software suite involves the use of uninitialized variables due to incorrect checks on the return values of functions. Exploiting this vulnerability could allow an attacker to compromise th...
CBL Mariner 2.0 Security Update: kernel (CVE-2024-49900)
The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-49900 advisory. - In the Linux kernel, the following vulnerability has been resolved: jfs: Fix uninit-value access of newea in...
udf: fix uninit-value use in udf_get_fileshortad
...
CVE-2024-12059
The ElementInvader Addons for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.3.1 via the elioptionvalue shortcode. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract...
libsndfile:sndfile_alt_fuzzer: Use-of-uninitialized-value in alac_decode
Detailed Report: https://oss-fuzz.com/testcase?key=4563150486700032 Project: libsndfile Fuzzing Engine: libFuzzer Fuzz Target: sndfilealtfuzzer Job Type: libfuzzermsanlibsndfile Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: alacdecode alacdecodeblock alacse...
PT-2024-22295
Name of the Vulnerable Software and Affected Versions Software affected versions not specified Description An unauthenticated attacker can perform a SQL injection by accessing the "/class/dbconnect.php" file and supplying malicious GET parameters. The HTTP GET parameters search, table, field, and...
PT-2024-17420 · WordPress · Elementinvader Addons For Elementor
Name of the Vulnerable Software and Affected Versions: ElementInvader Addons for Elementor plugin for WordPress versions up to and including 1.3.1 Description: The issue allows authenticated attackers with Contributor-level access or higher to extract arbitrary options from the wp options table...
SUSE SLES15 Security Update : kernel (Live Patch 47 for SLE 15 SP2) (SUSE-SU-2024:4263-1)
The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:4263-1 advisory. This update for the Linux Kernel 5.3.18-15020024188 fixes several issues. The following security issues were fixed: - CVE-2024-36904: tcp: Use...
Security Bulletin: IBM® Db2® is vulnerable to denial of service under specific conditions (CVE-2024-45663)
Summary IBM® Db2® is vulnerable to denial of service as the server may crash under certain conditions with a specially crafted query. Vulnerability Details CVEID:CVE-2024-45663 DESCRIPTION: IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server is vulnerable to a denial of service as the...
CVE-2024-53243
In Splunk Enterprise versions below 9.3.2, 9.2.4, and 9.1.7 and versions below 3.2.462, 3.7.18, and 3.8.5 of the Splunk Secure Gateway app on Splunk Cloud Platform, a low-privileged user that does not hold the “admin“ or “power“ Splunk roles could see alert search query responses using Splunk...
ffmpeg:ffmpeg_dem_MLV_fuzzer: Use-of-uninitialized-value in scan_file
Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4696002884337664 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegdemMLVfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...
OSV-2024-1351 Use-of-uninitialized-value in Archive::UnexpEndArcMsg
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=382526743 Crash type: Use-of-uninitialized-value Crash state: Archive::UnexpEndArcMsg Archive::ReadHeader50 Archive::ReadHeader...
PT-2024-40638 · Git +1 · Unrar
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of Use-of-uninitialized-value. The crash state includes functions such as Archive::UnexpEndArcMsg,...
Splunk Cloud Platform和Splunk Enterprise 安全漏洞
Splunk Cloud Platform and Splunk Enterprise are both products of Splunk Corporation, U.S.A. Splunk Cloud Platform is a powerful data collection, processing, and analytics service.Splunk Enterprise is a suite of data collection and analytics software. Splunk Cloud Platform and Splunk Enterprise ha...
PT-2024-9875 · Splunk · Splunk Cloud Platform +2
Name of the Vulnerable Software and Affected Versions: Splunk Enterprise versions prior to 9.3.2, 9.2.4, and 9.1.7 Splunk Secure Gateway app on Splunk Cloud Platform versions prior to 3.2.462, 3.7.18, and 3.8.5 Description: The issue is related to improper access control in the Splunk Secure...
