2376 matches found
CVE-2019-7676
A weak password vulnerability was discovered in Enphase Envoy R3... One can login via TCP port 8888 with the admin password for the admin account...
CVE-2019-7678
CVE-2019-7678 is a directory traversal vulnerability in Enphase Envoy R3.. exposed on TCP port 8888 via paths images/, include/, include/js, and include/css. The connected records corroborate this as a vulnerability affecting Enphase Envoy R3.. with CVSS v2 base 7.5 (PARTIAL confidentiality/integ...
CVE-2019-7678
A directory traversal vulnerability was discovered in Enphase Envoy R3.. via images/, include/, include/js, or include/css on TCP port 8888...
CVE-2019-7677
The CVE-2019-7677 entry describes an XSS vulnerability in Enphase Envoy R3.. , exploitable via the profileName parameter on the /home URI served over TCP port 8888. The issue is a client-side or input handling flaw that can allow injection of script/HTML, potentially affecting users accessing the...
CVE-2019-7676
CVE-2019-7676 affects Enphase Envoy R3.. ; a weak password vulnerability allows remote attackers to log in to the admin account via TCP port 8888 using the admin password. Reported impact includes partial confidentiality, integrity, and availability. CVSS data from sources indicate base scores of...
CVE-2019-7677
XSS exists in Enphase Envoy R3.. via the profileName parameter to the /home URI on TCP port 8888...
CVE-2019-7676: Weak Password Requirements
A weak password vulnerability was discovered in Enphase Envoy R3... One can login via TCP port 8888 with the admin password for the admin account...
CVE-2019-7677: Improper Neutralization of Input During Web Page Generation
XSS exists in Enphase Envoy R3.. via the profileName parameter to the /home URI on TCP port 8888...
CVE-2019-7678: Improper Limitation of a Pathname to a Restricted Directory
A directory traversal vulnerability was discovered in Enphase Envoy R3.. via images/, include/, include/js, or include/css on TCP port 8888...
envoy/config_fuzz_test: Heap-use-after-free in std::__1::__bucket_list_deallocator<std::__1::allocator<std::__1::__hash_node_ba
Project: https://github.com/envoyproxy/envoy.git Detailed report: https://oss-fuzz.com/testcase?key=5762646786179072 Project: envoy Fuzzer: libFuzzerenvoyconfigfuzztest Fuzz target binary: configfuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash...
envoy/h1_capture_fuzz_test: Crash in Envoy::TestUtility::findCounter
Detailed report: https://oss-fuzz.com/testcase?key=5760304764420096 Project: envoy Fuzzer: libFuzzerenvoyh1capturefuzztest Fuzz target binary: h1capturefuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f23827ad980 Crash State:...
Wallarm to Sponsor KubeCon + CloudNative Con
If you have not registered yet for the main Kubernetes event in North America which will start on December 10th in Seattle, you may be out of luck. The event is sold out and is only taking the waitlist applications. But if you are going, KubeCon + CloudNativeCon promises to be a treat with the...
Happy graduation, Envoy!
Envoy, the new darling of the DevOps community, performs the role of a service and edge proxy. With advanced features such as timeouts, rate limiting, circuit breaking, load balancing, retries, stats, logging, and distributed tracing are required to handle network failures in a fault tolerant and...
envoy/server_fuzz_test: Heap-use-after-free in std::__1::__hash_iterator<std::__1::__hash_node<std::__1::__hash_value_type<std:
Project: https://github.com/envoyproxy/envoy.git Detailed report: https://oss-fuzz.com/testcase?key=5761881319407616 Project: envoy Fuzzer: libFuzzerenvoyserverfuzztest Fuzz target binary: serverfuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash...
envoy/h1_capture_fuzz_test: NULL
Project: https://github.com/envoyproxy/envoy.git Detailed report: https://oss-fuzz.com/testcase?key=5674755374448640 Project: envoy Fuzzer: libFuzzerenvoyh1capturefuzztest Fuzz target binary: h1capturefuzztest Job Type: libfuzzerubsanenvoy Platform Id: linux Crash Type: Null-dereference READ Cras...
envoy/header_map_impl_fuzz_test: Heap-buffer-overflow in Envoy::StringUtil::itoa
Project: https://github.com/envoyproxy/envoy.git Detailed report: https://oss-fuzz.com/testcase?key=5689833624698880 Project: envoy Fuzzer: libFuzzerenvoyheadermapimplfuzztest Fuzz target binary: headermapimplfuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: Heap-buffer-overflo...
envoy/h1_capture_fuzz_test: Heap-use-after-free in std::__1::shared_ptr<Envoy::Network::Address::Instance const>::shared_ptr
Detailed report: https://oss-fuzz.com/testcase?key=6231939177512960 Project: envoy Fuzzer: libFuzzerenvoyh1capturefuzztest Fuzz target binary: h1capturefuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x60500077ea00 Crash State:...
envoy/server_fuzz_test: Crash in Envoy::Upstream::PriorityStateManager::initializePriorityFor
Project: https://github.com/envoyproxy/envoy.git Detailed report: https://oss-fuzz.com/testcase?key=4841621764964352 Project: envoy Fuzzer: libFuzzerenvoyserverfuzztest Fuzz target binary: serverfuzztest Job Type: libfuzzerubsanenvoy Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...
envoy/h1_capture_fuzz_test: Heap-use-after-free in Envoy::FakeConnectionBase::close
Project: https://github.com/envoyproxy/envoy.git Detailed report: https://oss-fuzz.com/testcase?key=6204353017806848 Project: envoy Fuzzer: libFuzzerenvoyh1capturefuzztest Fuzz target binary: h1capturefuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: Heap-use-after-free READ 1...
envoy/h1_capture_fuzz_test: Heap-use-after-free in Envoy::IntegrationUtil::makeSingleRequest
Detailed report: https://oss-fuzz.com/testcase?key=5090066358599680 Project: envoy Fuzzer: libFuzzerenvoyh1capturefuzztest Fuzz target binary: h1capturefuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x60b006c81240 Crash State:...