CVE-2021-35943

Couchbase Server 6.5.x and 6.6.x through 6.6.2 has Incorrect Access Control. Externally managed users are not prevented from using an empty password, per RFC4513...

Path traversal

Couchbase Server 6.5.x and 6.6.x through 6.6.2 has Incorrect Access Control. Externally managed users are not prevented from using an empty password, per RFC4513...

CVE-2021-35943

Couchbase Server 6.5.x and 6.6.x through 6.6.2 has Incorrect Access Control. Externally managed users are not prevented from using an empty password, per RFC4513...

CVE-2021-35943

Couchbase Server 6.5.x and 6.6.x through 6.6.2 has Incorrect Access Control. Externally managed users are not prevented from using an empty password, per RFC4513...

CVE-2021-35943

Couchbase Server 6.5.x and 6.6.x through 6.6.2 has Incorrect Access Control. Externally managed users are not prevented from using an empty password, per RFC4513...

PT-2021-21069

Name of the Vulnerable Software and Affected Versions: Couchbase Server versions 6.5.x through 6.6.2 Description: The issue concerns Incorrect Access Control in Couchbase Server, where externally managed users are not prevented from using an empty password, contrary to RFC4513 guidelines...

Couchbase Server 授权问题漏洞

Couchbase Server is a distributed, open source NoSQL non-relational database from Couchbase, Inc. that supports data querying, full-text searching, and active global replication. A security vulnerability exists in Couchbase Server versions 6.5.x through 6.6.2, which stems from RFC4513 that allows...

CVE-2021-35943: Improper Authentication

Couchbase Server 6.5.x and 6.6.x through 6.6.2 has Incorrect Access Control. Externally managed users are not prevented from using an empty password, per RFC4513...

golang:xml_fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4620909235798016 Project: golang Fuzzing Engine: libFuzzer Fuzz Target: xmlfuzzer Job Type: libfuzzerasangolang Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x005343843c86 Crash State: NULL Sanitizer: address ASAN Recommended Securi...

openexr:openexr_exrcheck_fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5906024163311616 Project: openexr Fuzzing Engine: libFuzzer Fuzz Target: openexrexrcheckfuzzer Job Type: libfuzzerubsanopenexr Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xffffffffffffffff Crash State: NULL Sanitizer: undefined...

netcdf:fuzz_open: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4823422211850240 Project: netcdf Fuzzing Engine: libFuzzer Fuzz Target: fuzzopen Job Type: libfuzzerubsannetcdf Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xffffffffffffffff Crash State: NULL Sanitizer: undefined UBSAN Recommended...

imagemagick:encoder_dng_fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5025402746175488 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderdngfuzzer Job Type: libfuzzerasani386imagemagick Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x47a01e7c Crash State: NULL Sanitizer: address ASAN...

CVE-2021-24639

The OMGF WordPress plugin before 4.5.4 does not enforce path validation, authorisation and CSRF checks in the omgfajaxemptydir AJAX action, which allows any authenticated users to delete arbitrary files or folders on the server...

CVE-2021-24639

The OMGF WordPress plugin before 4.5.4 does not enforce path validation, authorisation and CSRF checks in the omgfajaxemptydir AJAX action, which allows any authenticated users to delete arbitrary files or folders on the server...

kryo:DeserializeStringFuzzer: Uncaught exception with empty stacktrace

Project: https://github.com/EsotericSoftware/kryo.git Detailed Report: https://oss-fuzz.com/testcase?key=6476536526536704 Project: kryo Fuzzing Engine: libFuzzer Fuzz Target: DeserializeStringFuzzer Job Type: libfuzzerasankryo Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash...

apache-httpd:fuzz_preq: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6004816267051008 Project: apache-httpd Fuzzing Engine: libFuzzer Fuzz Target: fuzzpreq Job Type: libfuzzerubsanapache-httpd Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00000ca28b70 Crash State: NULL Sanitizer: undefined UBSAN...

golang: net/http/httputil: ReverseProxy forwards connection headers if first one is empty

A flaw was found in Go, acting as an unintended proxy or intermediary, where ReverseProxy forwards connection headers if the first one was empty. This flaw allows an attacker to drop arbitrary headers. The highest threat from this vulnerability is to integrity...

c-blosc:compress_fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5701419911479296 Project: c-blosc Fuzzing Engine: libFuzzer Fuzz Target: compressfuzzer Job Type: libfuzzerubsanc-blosc Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000003bc7b40 Crash State: NULL Sanitizer: undefined UBSAN...

tdengine:sql-fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4897035493441536 Project: tdengine Fuzzing Engine: libFuzzer Fuzz Target: sql-fuzzer Job Type: libfuzzerubsantdengine Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x014ef4300020 Crash State: NULL Sanitizer: undefined UBSAN Recommend...

wasm3:fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4817025503985664 Project: wasm3 Fuzzing Engine: libFuzzer Fuzz Target: fuzzer Job Type: libfuzzerubsanwasm3 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000002f20138 Crash State: NULL Sanitizer: undefined UBSAN Recommended Securit...