3444 matches found
apache-commons-configuration:YAMLConfigurationReadFuzzer: Security exception in org.yaml.snakeyaml.constructor.BaseConstructor.constructObject
Detailed Report: https://oss-fuzz.com/testcase?key=5983542454124544 Project: apache-commons-configuration Fuzzing Engine: libFuzzer Fuzz Target: YAMLConfigurationReadFuzzer Job Type: libfuzzerasanapache-commons-configuration Platform Id: linux Crash Type: Security exception Crash Address: Crash...
apache-commons-configuration:YAMLConfigurationReadFuzzer: Security exception in org.apache.commons.configuration2.AbstractYAMLBasedConfiguration.parseMap
Detailed Report: https://oss-fuzz.com/testcase?key=4714168447533056 Project: apache-commons-configuration Fuzzing Engine: libFuzzer Fuzz Target: YAMLConfigurationReadFuzzer Job Type: libfuzzerasanapache-commons-configuration Platform Id: linux Crash Type: Security exception Crash Address: Crash...
apache-commons-jxpath:JXPathFuzzer: Security exception in org.apache.commons.jxpath.ri.compiler.CoreOperationMultiply.computeValue
Detailed Report: https://oss-fuzz.com/testcase?key=4666259832176640 Project: apache-commons-jxpath Fuzzing Engine: libFuzzer Fuzz Target: JXPathFuzzer Job Type: libfuzzerasanapache-commons-jxpath Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...
apache-commons:ImagingJpegFuzzer: Security exception in java.desktop/java.awt.image.DataBufferInt.<init>
Detailed Report: https://oss-fuzz.com/testcase?key=6469414542770176 Project: apache-commons Fuzzing Engine: libFuzzer Fuzz Target: ImagingJpegFuzzer Job Type: libfuzzerasanapache-commons Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...
apache-commons-jxpath:JXPathFuzzer: Security exception in org.apache.commons.jxpath.ri.parser.XPathParser.MultiplicativeExpr
Detailed Report: https://oss-fuzz.com/testcase?key=5527081739485184 Project: apache-commons-jxpath Fuzzing Engine: libFuzzer Fuzz Target: JXPathFuzzer Job Type: libfuzzerasanapache-commons-jxpath Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...
apache-commons:ImagingBmpFuzzer: Security exception in org.apache.commons.imaging.common.BinaryFunctions.readBytes
Detailed Report: https://oss-fuzz.com/testcase?key=5238437669634048 Project: apache-commons Fuzzing Engine: libFuzzer Fuzz Target: ImagingBmpFuzzer Job Type: libfuzzerasanapache-commons Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...
apache-commons-configuration:YAMLConfigurationReadFuzzer: Security exception in org.yaml.snakeyaml.composer.Composer.composeMappingNode
Detailed Report: https://oss-fuzz.com/testcase?key=5227066127155200 Project: apache-commons-configuration Fuzzing Engine: libFuzzer Fuzz Target: YAMLConfigurationReadFuzzer Job Type: libfuzzerasanapache-commons-configuration Platform Id: linux Crash Type: Security exception Crash Address: Crash...
apache-commons-configuration:JSONConfigurationReadFuzzer: Security exception in com.fasterxml.jackson.databind.deser.std.UntypedObjectDeserializer$Vanilla._mapO
Detailed Report: https://oss-fuzz.com/testcase?key=4763845192712192 Project: apache-commons-configuration Fuzzing Engine: libFuzzer Fuzz Target: JSONConfigurationReadFuzzer Job Type: libfuzzerasanapache-commons-configuration Platform Id: linux Crash Type: Security exception Crash Address: Crash...
Security Bulletin: IBM InfoSphere Identity Insight vulnerabilities in third party libraries (CVE-2021-39239, CVE-2022-23308, CVE-2021-29424, CVE-2020-15250, 177835)
Summary A vulnerability in the libxml2 library can cause a denial of service in IBM InfoSphere Identity Insight. Other vulnerabilities that do not impact Identity Insight are present in four libraries that are currently included with the product but not used. Vulnerability Details...
Security Bulletin: IBM Sterling Connect:Direct for Microsoft Windows is vulnerable to remote code execution due to Apache Commons Configuration (CVE-2022-33980)
Summary There is a vulnerability in Apache Commons Configuration used by IBM Sterling Connect:Direct for Microsoft Windows. IBM Sterling Connect:Direct for Microsoft Windows has addressed the applicable CVE CVE-2022-33980. Vulnerability Details CVEID:CVE-2022-33980 DESCRIPTION: Apache Commons...
Security Bulletin: Apache Commons Configuration Vulnerability affects IBM SPSS Modeler [CVE-2022-33980]
Summary There is a vulnerability in the version of Apache Commons Configuration that was included in IBM SPSS Modeler. This vulnerability has been addressed. CVE-2022-33980 Vulnerability Details CVEID:CVE-2022-33980 DESCRIPTION: Apache Commons Configuration could allow a remote attacker to execut...
apache-commons-jxpath:JXPathFuzzer: Security exception in org.apache.commons.jxpath.ri.EvalContext.nextSet
Detailed Report: https://oss-fuzz.com/testcase?key=4964532103020544 Project: apache-commons-jxpath Fuzzing Engine: libFuzzer Fuzz Target: JXPathFuzzer Job Type: libfuzzerasanapache-commons-jxpath Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...
Security Bulletin: IBM Sterling Connect:Direct File Agent is vulnerable to remote code execution due to Apache Commons Configuration (CVE-2022-33980)
Summary There is a vulnerability in Apache Commons Configuration used by IBM Sterling Connect:Direct File Agent. IBM Sterling Connect:Direct File Agent has addressed the applicable CVE CVE-2022-33980. Vulnerability Details CVEID:CVE-2022-33980 DESCRIPTION: Apache Commons Configuration could allow...
apache-commons-jxpath:JXPathFuzzer: Security exception in com.code_intelligence.jazzer.sanitizers.RegexInjection.hookInternal
Detailed Report: https://oss-fuzz.com/testcase?key=5559877048598528 Project: apache-commons-jxpath Fuzzing Engine: libFuzzer Fuzz Target: JXPathFuzzer Job Type: libfuzzerasanapache-commons-jxpath Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...
apache-commons-configuration:YAMLConfigurationWriteFuzzer: Uncaught exception in org.yaml.snakeyaml.constructor.BaseConstructor.constructObject
Detailed Report: https://oss-fuzz.com/testcase?key=6739209968287744 Project: apache-commons-configuration Fuzzing Engine: libFuzzer Fuzz Target: YAMLConfigurationWriteFuzzer Job Type: libfuzzerasanapache-commons-configuration Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash...
apache-commons-configuration:YAMLConfigurationReadFuzzer: Uncaught exception in java.base/java.util.stream.ReferencePipeline$7$1.accept
Detailed Report: https://oss-fuzz.com/testcase?key=5313069491814400 Project: apache-commons-configuration Fuzzing Engine: libFuzzer Fuzz Target: YAMLConfigurationReadFuzzer Job Type: libfuzzerasanapache-commons-configuration Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash...
apache-commons-configuration:YAMLConfigurationReadFuzzer: Uncaught exception in java.base/java.util.ArrayList$ArrayListSpliterator.forEachRemaining
Detailed Report: https://oss-fuzz.com/testcase?key=5047148772720640 Project: apache-commons-configuration Fuzzing Engine: libFuzzer Fuzz Target: YAMLConfigurationReadFuzzer Job Type: libfuzzerasanapache-commons-configuration Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash...
apache-commons-configuration:YAMLConfigurationWriteFuzzer: Uncaught exception in org.apache.commons.configuration2.AbstractYAMLBasedConfiguration.lambda$parseCol
Detailed Report: https://oss-fuzz.com/testcase?key=4997815570399232 Project: apache-commons-configuration Fuzzing Engine: libFuzzer Fuzz Target: YAMLConfigurationWriteFuzzer Job Type: libfuzzerasanapache-commons-configuration Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash...
Security Bulletin: IBM Security Identity Manager virtual appliance is vulnerable to arbitrary code execution due to Apache Log4j and issues in other open source components (CVE-2021-4104)
Summary IBM Security Identity Manager virtual appliance is vulnerable to arbitrary code execution due to Apache Log4j CVE-2021-4104. Apache Log4j is used by IBM Security Identity Manager virtual appliance as part of its logging infrastructure. This fix upgrades to Apache Log4j v2.17.1, as well as...
