CVE-2020-37005

Summary: CVE-2020-37005 affects TimeClock Software 1.01 and is described as an authenticated time-based SQL injection. The flaw resides in the add_entry.php endpoint, where an attacker can manipulate the notes parameter to induce conditional time delays and determine valid usernames by measuring ...

OSV-2022-1106 Heap-buffer-overflow in APFSJObject::add_entry

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52764 Crash type: Heap-buffer-overflow READ Crash state: APFSJObject::addentry APFSJObject::APFSJObject APFSJObject::APFSJObject...