6410 matches found
libhevc:hevc_dec_fuzzer: Segv on unknown address with empty stacktrace
Detailed Report: https://oss-fuzz.com/testcase?key=6689348804214784 Project: libhevc Fuzzing Engine: libFuzzer Fuzz Target: hevcdecfuzzer Job Type: libfuzzerasani386libhevc Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash...
libxml2: Hashing of empty dict strings isn't deterministic
A flaw was found in libxml2. This issue occurs when hashing empty strings which aren't null-terminated, xmlDictComputeFastKey could produce inconsistent results, which may lead to various logic or memory errors, including double free errors...
haproxy: Proxy forwards malformed empty Content-Length headers
A flaw was found in HAProxy. Empty Content-Length headers are forwarded, which could cause an HTTP/1 server behind it to interpret the payload as an extra request. This may render the HTTP/1 server vulnerable to attacks in some uncommon cases...
Denial Of Service
librttopo.so is vulnerable to Denial Of Service. The vulnerability is due to mishandling of empty geometries. The remote attackers can perform a DoS via a crafted STAsX3D input which leads to server termination...
HNAP1 Interface D-Link DIR-822 Router Access
The vulnerability of the HNAP1 interface of D-Link DIR-822 microprogrammed router software is related to the absence of authentication for the critical function. Exploiting this vulnerability allows a malicious actor to access administrator accounts with empty passwords...
HNAP1 Interface D-Link DIR-822 Router Access
The vulnerability of the HNAP1 interface of D-Link DIR-822 microprogrammed router software is related to the absence of authentication for the critical function. Exploiting this vulnerability allows a malicious actor to access administrator accounts with empty passwords...
scapy:pcap_fuzzer: Segv on unknown address with empty stacktrace
Detailed Report: https://oss-fuzz.com/testcase?key=6457523632668672 Project: scapy Fuzzing Engine: libFuzzer Fuzz Target: pcapfuzzer Job Type: libfuzzerasanscapy Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash Revision:...
tcmalloc:span_fuzz: Segv on unknown address with empty stacktrace
Detailed Report: https://oss-fuzz.com/testcase?key=6375963914993664 Project: tcmalloc Fuzzing Engine: libFuzzer Fuzz Target: spanfuzz Job Type: libfuzzerasantcmalloc Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash Revision:...
icu:plurrule_fuzzer: Null-dereference READ with empty stacktrace
Detailed Report: https://oss-fuzz.com/testcase?key=5105079052992512 Project: icu Fuzzing Engine: libFuzzer Fuzz Target: plurrulefuzzer Job Type: libfuzzerasanicu Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: NULL Sanitizer: address ASAN Crash...
haproxy: Proxy forwards malformed empty Content-Length headers
A flaw was found in HAProxy. Empty Content-Length headers are forwarded, which could cause an HTTP/1 server behind it to interpret the payload as an extra request. This may render the HTTP/1 server vulnerable to attacks in some uncommon cases...
piex:fuzzer-piex: Segv on unknown address with empty stacktrace
Detailed Report: https://oss-fuzz.com/testcase?key=4891840604078080 Project: piex Fuzzing Engine: afl Fuzz Target: fuzzer-piex Job Type: aflasanpiex Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash Revision:...
D-Link DIR-822 Access Control Error Vulnerability
The D-Link DIR-822 is a wireless router from China's AUO D-Link. An access control error vulnerability exists in the D-Link DIR-822+ version V1.0.2, which stems from a login bypass issue in the HNAP1 interface that can be exploited by an attacker to log in to the administrator account using an...
CVE-2023-51987
D-Link DIR-822+ V1.0.2 contains a login bypass in the HNAP1 interface, which allows attackers to log in to administrator accounts with empty passwords...
CVE-2023-51989
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2025-51987. Reason: This candidate is a reservation duplicate of CVE-2025-51987. Notes: All CVE users should reference CVE-2025-51987 instead of this candidate. All references and descriptions in this candidate have been removed t...
Design/Logic Flaw
D-Link DIR-822+ V1.0.2 contains a login bypass in the HNAP1 interface, which allows attackers to log in to administrator accounts with empty passwords...
Design/Logic Flaw
D-Link DIR-822+ V1.0.2 contains a login bypass in the HNAP1 interface, which allows attackers to log in to administrator accounts with empty passwords...
CVE-2023-51987
D-Link DIR-822+ V1.0.2 contains a login bypass in the HNAP1 interface, which allows attackers to log in to administrator accounts with empty passwords...
CVE-2023-51987
D-Link DIR-822+ V1.0.2 contains a login bypass in the HNAP1 interface, which allows attackers to log in to administrator accounts with empty passwords...
CVE-2023-51987: Missing Authentication for Critical Function
D-Link DIR-822+ V1.0.2 contains a login bypass in the HNAP1 interface, which allows attackers to log in to administrator accounts with empty passwords...