6379 matches found
Authentication flaw
In SonarQube 8.4.2.36762, an external attacker can achieve authentication bypass through SonarScanner. With an empty value for the -D sonar.login option, anonymous authentication is forced. This allows creating and overwriting public and private projects via the /api/ce/submit endpoint...
go-attestation:parse_ak_public12_fuzzer: Segv on unknown address with empty stacktrace
Detailed Report: https://oss-fuzz.com/testcase?key=5124533432090624 Project: go-attestation Fuzzing Engine: libFuzzer Fuzz Target: parseakpublic12fuzzer Job Type: libfuzzerasango-attestation Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address...
kubernetes:yaml_FuzzDurationStrict: Crash with empty stacktrace
Detailed Report: https://oss-fuzz.com/testcase?key=5180264390852608 Project: kubernetes Fuzzing Engine: libFuzzer Fuzz Target: yamlFuzzDurationStrict Job Type: libfuzzerasankubernetes Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x001935653908 Crash State: NULL Sanitizer: address AS...
suricata:fuzz_sigpcap: Null-dereference READ with empty stacktrace
Detailed Report: https://oss-fuzz.com/testcase?key=5206038187606016 Project: suricata Fuzzing Engine: libFuzzer Fuzz Target: fuzzsigpcap Job Type: libfuzzerasansuricata Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: NULL Sanitizer: address ASAN Cra...
golang:fuzzer-gzip: Segv on unknown address with empty stacktrace
Detailed Report: https://oss-fuzz.com/testcase?key=6198139272560640 Project: golang Fuzzing Engine: libFuzzer Fuzz Target: fuzzer-gzip Job Type: libfuzzerasangolang Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash Revision:...
Improper Authentication
Overview react-adal is an Azure Active Directory Library ADAL support for ReactJS. Affected versions of this package are vulnerable to Improper Authentication. It is possible for a specially crafted JWT token and request URL can cause the nonce, session and refresh values to be incorrectly...
Mozilla Firefox Sailfish Resource Management Error
The vulnerability of Mozilla Firefox and Sailfish Browse relates to resource management errors. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code by executing certain JavaScript code within empty iframe objects remotely...
CVE-2020-26607
An issue was discovered in TimaService on Samsung mobile devices with O8.x, P9.0, and Q10.0 software. PendingIntent with an empty intent is mishandled, allowing an attacker to perform a privileged action via a modified intent. The Samsung ID is SVE-2020-18418 October 2020...
CVE-2020-26601
An issue was discovered in DirEncryptService on Samsung mobile devices with O8.x, P9.0, and Q10.0 software. PendingIntent with an empty intent is mishandled, allowing an attacker to perform a privileged action via a modified intent. The Samsung ID is SVE-2020-18034 October 2020...
CVE-2020-26607
An issue was discovered in TimaService on Samsung mobile devices with O8.x, P9.0, and Q10.0 software. PendingIntent with an empty intent is mishandled, allowing an attacker to perform a privileged action via a modified intent. The Samsung ID is SVE-2020-18418 October 2020...
CVE-2020-26607: Undefined Security Weakness
An issue was discovered in TimaService on Samsung mobile devices with O8.x, P9.0, and Q10.0 software. PendingIntent with an empty intent is mishandled, allowing an attacker to perform a privileged action via a modified intent. The Samsung ID is SVE-2020-18418 October 2020...
PT-2020-16474
Name of the Vulnerable Software and Affected Versions Samsung mobile devices with O8.x software Samsung mobile devices with P9.0 software Samsung mobile devices with Q10.0 software Description An issue in DirEncryptService on Samsung mobile devices allows an attacker to perform a privileged actio...
DEBIAN-CVE-2020-26160
jwt-go before 4.0.0-preview1 allows attackers to bypass intended access restrictions in situations with string for m"aud" which is allowed by the specification. Because the type assertion fails, "" is the value of aud. This is a security problem if the JWT token is presented to a service that lac...
CVE-2020-21244
An issue was discovered in FrontAccounting 2.4.7. There is a Directory Traversal vulnerability that can empty folder via admin/instlang.php...
UBUNTU-CVE-2020-26160
jwt-go before 4.0.0-preview1 allows attackers to bypass intended access restrictions in situations with string for m"aud" which is allowed by the specification. Because the type assertion fails, "" is the value of aud. This is a security problem if the JWT token is presented to a service that lac...
CVE-2020-21244
An issue was discovered in FrontAccounting 2.4.7. There is a Directory Traversal vulnerability that can empty folder via admin/instlang.php...
PT-2020-15332
Name of the Vulnerable Software and Affected Versions FrontAccounting version 2.4.7 Description An issue was discovered in FrontAccounting, which is a Directory Traversal vulnerability. This vulnerability can be exploited to empty a folder via the admin/inst lang.php endpoint. The estimated numbe...
CVE-2020-21244: Improper Limitation of a Pathname to a Restricted Directory
An issue was discovered in FrontAccounting 2.4.7. There is a Directory Traversal vulnerability that can empty folder via admin/instlang.php...
kernel: out-of-bounds write in mpol_parse_str function in mm/mempolicy.c
An out-of-bounds write flaw was found in the Linux kernel. An empty nodelist in mempolicy.c is mishandled durig mount option parsing leading to a stack-based out-of-bounds write. The highest threat from this vulnerability is to system availability...
kernel: out-of-bounds write in mpol_parse_str function in mm/mempolicy.c
An out-of-bounds write flaw was found in the Linux kernel. An empty nodelist in mempolicy.c is mishandled durig mount option parsing leading to a stack-based out-of-bounds write. The highest threat from this vulnerability is to system availability...