CVE-2023-50291

Insufficiently Protected Credentials vulnerability in Apache Solr. This issue affects Apache Solr: from 6.0.0 through 8.11.2, from 9.0.0 before 9.3.0. One of the two endpoints that publishes the Solr process' Java system properties, /admin/info/properties, was only setup to hide system properties...

CVE-2023-50291: Insufficiently Protected Credentials

Insufficiently Protected Credentials vulnerability in Apache Solr. This issue affects Apache Solr: from 6.0.0 through 8.11.2, from 9.0.0 before 9.3.0. One of the two endpoints that publishes the Solr process' Java system properties, /admin/info/properties, was only setup to hide system properties...

PT-2024-1632 · Apache · Apache Solr

Name of the Vulnerable Software and Affected Versions: Apache Solr versions 6.0.0 through 8.11.2 Apache Solr versions 9.0.0 through 9.2.x Description: The issue is related to insufficient protection of credentials in Apache Solr. One of the endpoints, "/admin/info/properties", was only set up to...

PT-2023-35698 · Mosquitto · Mosquitto

Name of the Vulnerable Software and Affected Versions: mosquitto affected versions not specified Description: A heap buffer overflow read issue has been identified. The crash occurs in the mosquitto strdup function, which is called by config read file core and config read file. Recommendations: A...

PT-2023-35936

Name of the Vulnerable Software and Affected Versions mosquitto affected versions not specified Description A heap buffer overflow read issue has been identified. The crash occurs in the mosquitto strdup function, which is called by config read file core and config read file. Recommendations At t...

lxc:fuzz-lxc-config-read: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5954362917650432 Project: lxc Fuzzing Engine: libFuzzer Fuzz Target: fuzz-lxc-config-read Job Type: libfuzzerubsanlxc Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7feb65de4a90 Crash State: NULL Sanitizer: undefined UBSAN Recommend...

lxc:fuzz-lxc-config-read: Use-of-uninitialized-value in strequal

Project: https://github.com/lxc/lxc.git Detailed Report: https://oss-fuzz.com/testcase?key=5084676248174592 Project: lxc Fuzzing Engine: libFuzzer Fuzz Target: fuzz-lxc-config-read Job Type: libfuzzermsanlxc Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

lxc:fuzz-lxc-config-read: Stack-buffer-overflow in parse_byte_size_string

Detailed Report: https://oss-fuzz.com/testcase?key=4819590195576832 Project: lxc Fuzzing Engine: afl Fuzz Target: fuzz-lxc-config-read Job Type: aflasanlxc Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address: 0x7f379b948a3f Crash State: parsebytesizestring...