envoy/codec_impl_fuzz_test: NULL

Project: https://github.com/envoyproxy/envoy.git Detailed report: https://oss-fuzz.com/testcase?key=5656339617939456 Project: envoy Fuzzer: libFuzzerenvoycodecimplfuzztest Fuzz target binary: codecimplfuzztest Job Type: libfuzzerubsanenvoy Platform Id: linux Crash Type: UNKNOWN READ Crash Address...

envoy/codec_impl_fuzz_test: Heap-use-after-free in Envoy::Http::HttpStream::directionalAction

Project: https://github.com/envoyproxy/envoy.git Detailed report: https://oss-fuzz.com/testcase?key=5657409819770880 Project: envoy Fuzzer: libFuzzerenvoycodecimplfuzztest Fuzz target binary: codecimplfuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: Heap-use-after-free READ 8...

Weak Password Vulnerability in Enphase Envoy

The Enphase Envoy is the home energy control gateway at the heart of the Enphase Energy home energy solution. A weak password vulnerability exists in Enphase Envoy. A remote attacker is allowed to exploit the vulnerability to submit a special request for unauthorized access to the application...

Enphase Envoy Cross-Site Scripting Vulnerability

Enphase Envoy is a smart home referrer. enphase Envoy R3.. /home URI is vulnerable to cross-site scripting, which can be exploited by attackers to inject malicious scripts or HTML code...

Directory traversal

A directory traversal vulnerability was discovered in Enphase Envoy R3.. via images/, include/, include/js, or include/css on TCP port 8888...

Cross site scripting

XSS exists in Enphase Envoy R3.. via the profileName parameter to the /home URI on TCP port 8888...

CVE-2019-7677

XSS exists in Enphase Envoy R3.. via the profileName parameter to the /home URI on TCP port 8888...

CVE-2019-7676

A weak password vulnerability was discovered in Enphase Envoy R3... One can login via TCP port 8888 with the admin password for the admin account...

CVE-2019-7676

A weak password vulnerability was discovered in Enphase Envoy R3... One can login via TCP port 8888 with the admin password for the admin account...

Design/Logic Flaw

A weak password vulnerability was discovered in Enphase Envoy R3... One can login via TCP port 8888 with the admin password for the admin account...

CVE-2019-7678

A directory traversal vulnerability was discovered in Enphase Envoy R3.. via images/, include/, include/js, or include/css on TCP port 8888...

CVE-2019-7677

XSS exists in Enphase Envoy R3.. via the profileName parameter to the /home URI on TCP port 8888...

CVE-2019-7678

A directory traversal vulnerability was discovered in Enphase Envoy R3.. via images/, include/, include/js, or include/css on TCP port 8888...

CVE-2019-7676

A weak password vulnerability was discovered in Enphase Envoy R3... One can login via TCP port 8888 with the admin password for the admin account...

CVE-2019-7678

CVE-2019-7678 is a directory traversal vulnerability in Enphase Envoy R3.. exposed on TCP port 8888 via paths images/, include/, include/js, and include/css. The connected records corroborate this as a vulnerability affecting Enphase Envoy R3.. with CVSS v2 base 7.5 (PARTIAL confidentiality/integ...

CVE-2019-7678

A directory traversal vulnerability was discovered in Enphase Envoy R3.. via images/, include/, include/js, or include/css on TCP port 8888...

CVE-2019-7677

XSS exists in Enphase Envoy R3.. via the profileName parameter to the /home URI on TCP port 8888...

CVE-2019-7677

The CVE-2019-7677 entry describes an XSS vulnerability in Enphase Envoy R3.. , exploitable via the profileName parameter on the /home URI served over TCP port 8888. The issue is a client-side or input handling flaw that can allow injection of script/HTML, potentially affecting users accessing the...

CVE-2019-7676

CVE-2019-7676 affects Enphase Envoy R3.. ; a weak password vulnerability allows remote attackers to log in to the admin account via TCP port 8888 using the admin password. Reported impact includes partial confidentiality, integrity, and availability. CVSS data from sources indicate base scores of...

envoy/config_fuzz_test: Heap-use-after-free in std::__1::__bucket_list_deallocator<std::__1::allocator<std::__1::__hash_node_ba

Project: https://github.com/envoyproxy/envoy.git Detailed report: https://oss-fuzz.com/testcase?key=5762646786179072 Project: envoy Fuzzer: libFuzzerenvoyconfigfuzztest Fuzz target binary: configfuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash...