PT-2021-21789 · Google · Tensorflow

Name of the Vulnerable Software and Affected Versions: TensorFlow versions prior to 2.6.0 TensorFlow versions 2.5.1 and earlier TensorFlow versions 2.4.3 and earlier TensorFlow versions 2.3.4 and earlier Description: An attacker can cause undefined behavior via binding a reference to null pointer...

PT-2021-21791 · Google · Tensorflow

Name of the Vulnerable Software and Affected Versions: TensorFlow versions prior to 2.6.0 TensorFlow versions 2.5.1 and earlier TensorFlow versions 2.4.3 and earlier TensorFlow versions 2.3.4 and earlier Description: An attacker can trigger a denial of service via a CHECK-fail in tf.raw...

istio:fuzz_parse_inputs: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5083636956266496 Project: istio Fuzzing Engine: libFuzzer Fuzz Target: fuzzparseinputs Job Type: libfuzzerasanistio Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000076d0c0c Crash State: NULL Sanitizer: address ASAN Recommended...

PT-2021-18162 · D Link · D-Link Dsp-W215

Name of the Vulnerable Software and Affected Versions: D-Link DSP-W215 version 1.10 Description: A Null Pointer Dereference issue exists, which could allow a remote malicious user to cause a denial of service via usr/bin/lighttpd. This can be triggered by sending an HTTP request without a URL in...

cilium:fuzz: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4556447370313728 Project: cilium Fuzzing Engine: libFuzzer Fuzz Target: fuzz Job Type: libfuzzerasancilium Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xffffffffffffffff Crash State: NULL Sanitizer: address ASAN Recommended Securit...

qemu:qemu-fuzz-i386-target-generic-fuzz-virtio-9p-synth: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5958490723057664 Project: qemu Fuzzing Engine: libFuzzer Fuzz Target: qemu-fuzz-i386-target-generic-fuzz-virtio-9p-synth Job Type: libfuzzerubsanqemu Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x296c6c756e28 Crash State: NULL...

fastjson:fuzz: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6697371873443840 Project: fastjson Fuzzing Engine: libFuzzer Fuzz Target: fuzz Job Type: libfuzzerasanfastjson Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x00002484643e Crash State: NULL Sanitizer: address ASAN Recommended Securi...

libredwg:llvmfuzz: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6119870939922432 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerubsanlibredwg Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000020061 Crash State: NULL Sanitizer: undefined UBSAN Recommended...

Brocade Fabric OS 授权问题漏洞

Brocade Fabric OS FOS is a set of embedded operating systems used in devices such as switches and routers from Brocade USA. Brocade Fabric OS has a security vulnerability. An attacker could exploit the vulnerability to bypass restrictions via empty passwords in order to escalate their privileges...

pcl:ply_reader_fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4639761112367104 Project: pcl Fuzzing Engine: libFuzzer Fuzz Target: plyreaderfuzzer Job Type: libfuzzerubsanpcl Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x006162677220 Crash State: NULL Sanitizer: undefined UBSAN Recommended...

protoreflect:fuzz_protoparse: Null-dereference READ with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6235399889485824 Project: protoreflect Fuzzing Engine: libFuzzer Fuzz Target: fuzzprotoparse Job Type: libfuzzerasanprotoreflect Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: NULL Sanitizer: addre...

git:fuzz-commit-graph: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5139385522847744 Project: git Fuzzing Engine: libFuzzer Fuzz Target: fuzz-commit-graph Job Type: libfuzzerasangit Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x61b00025b000 Crash State: NULL Sanitizer: address ASAN Recommended...

gpac:fuzz_parse: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6339950181220352 Project: gpac Fuzzing Engine: libFuzzer Fuzz Target: fuzzparse Job Type: libfuzzerubsangpac Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7efeb73f3440 Crash State: NULL Sanitizer: undefined UBSAN Recommended Securi...

nss:tls-client-no_fuzzer_mode: Null-dereference READ with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6294981873631232 Project: nss Fuzzing Engine: libFuzzer Fuzz Target: tls-client-nofuzzermode Job Type: libfuzzerasannss Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: NULL Sanitizer: address ASAN...

wolfmqtt:wolfmqtt-fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5781486774124544 Project: wolfmqtt Fuzzing Engine: libFuzzer Fuzz Target: wolfmqtt-fuzzer Job Type: libfuzzerubsanwolfmqtt Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x0000005abb08 Crash State: NULL Sanitizer: undefined UBSAN...

CVE-2020-4821

IBM InfoSphere Data Replication 11.4 and IBM InfoSphere Change Data Capture for z/OS 10.2.1, under certain configurations, could allow a user to bypass authentication mechanisms using an empty password string. IBM X-Force ID: 189834...

CVE-2020-4821

IBM InfoSphere Data Replication 11.4 and IBM InfoSphere Change Data Capture for z/OS 10.2.1, under certain configurations, could allow a user to bypass authentication mechanisms using an empty password string. IBM X-Force ID: 189834...

Authentication flaw

IBM InfoSphere Data Replication 11.4 and IBM InfoSphere Change Data Capture for z/OS 10.2.1, under certain configurations, could allow a user to bypass authentication mechanisms using an empty password string. IBM X-Force ID: 189834...

CVE-2020-4821

IBM InfoSphere Data Replication 11.4 and IBM InfoSphere Change Data Capture for z/OS 10.2.1, under certain configurations, could allow a user to bypass authentication mechanisms using an empty password string. IBM X-Force ID: 189834...

CVE-2020-4821: Improper Authentication

IBM InfoSphere Data Replication 11.4 and IBM InfoSphere Change Data Capture for z/OS 10.2.1, under certain configurations, could allow a user to bypass authentication mechanisms using an empty password string. IBM X-Force ID: 189834...