11107 matches found
CVE-2018-17453
Removed by vendor...
CVE-2023-29199 vm2 Sandbox escape vulnerability
There exists a vulnerability in source code transformer exception sanitization logic of vm2 for versions up to 3.9.15, allowing attackers to bypass handleException and leak unsanitized host exceptions which can be used to escape the sandbox and run arbitrary code in host context. A threat actor c...
CVE-2023-29199
There exists a vulnerability in source code transformer exception sanitization logic of vm2 for versions up to 3.9.15, allowing attackers to bypass "handleException" and leak unsanitized host exceptions which can be used to escape the sandbox and run arbitrary code in host context. A threat actor...
K000133512: Intel platform vulnerabilities (INTEL-SA-00737) CVE-2021-39295, CVE-2021-39296, CVE-2022-29493, CVE-2022-29494, and CVE-2022-35729
Security Advisory Description CVE-2021-39295 In OpenBMC 2.9, crafted IPMI messages allow an attacker to cause a denial of service to the BMC via the netipmid IPMI lan+ interface. CVE-2021-39296 In OpenBMC 2.9, crafted IPMI messages allow an attacker to bypass authentication and gain full control ...
EulerOS 2.0 SP8 : net-snmp (EulerOS-SA-2023-1616)
According to the versions of the net-snmp packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - handleipDefaultTTL in agent/mibgroup/ip-mib/ipscalars.c in Net-SNMP 5.8 through 5.9.3 has a NULL Pointer Exception bug that can be used by a...
spring-data-mongodb:ParameterBindingJsonReaderFuzzer: Security exception in org.springframework.expression.spel.ast.OpPlus.getValueInternal
Detailed Report: https://oss-fuzz.com/testcase?key=4922481453694976 Project: spring-data-mongodb Fuzzing Engine: libFuzzer Fuzz Target: ParameterBindingJsonReaderFuzzer Job Type: libfuzzerasanspring-data-mongodb Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...
PT-2023-2352
Name of the Vulnerable Software and Affected Versions vm2 versions up to 3.9.15 Description The issue is related to the source code transformer's exception sanitization logic in vm2, allowing attackers to bypass the handleException function and leak unsanitized host exceptions. This can be used t...
jstl-api:ParserFuzzer: Security exception in java.base/jdk.internal.misc.Unsafe.allocateUninitializedArray
Detailed Report: https://oss-fuzz.com/testcase?key=4572215072129024 Project: jstl-api Fuzzing Engine: libFuzzer Fuzz Target: ParserFuzzer Job Type: libfuzzerasanjstl-api Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...
The vulnerability of the Wizard service, a security and management tool for web devices, allows a hacker to execute arbitrary commands.
The vulnerability of the Wizard service, a security and management tool for web devices, Sophos Web Appliance SWA, is related to the failure to take measures to neutralize special elements during exception handling. Exploiting this vulnerability allows an attacker operating remotely to execute...
itext7:PdfFuzzer: Security exception in java.base/java.util.Arrays.copyOf
Project: https://github.com/itext/itext7.git Detailed Report: https://oss-fuzz.com/testcase?key=4913895734378496 Project: itext7 Fuzzing Engine: libFuzzer Fuzz Target: PdfFuzzer Job Type: libfuzzerasanitext7 Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...
g-http-java-client:JsonObjectParserFuzzer: Security exception in com.google.api.client.json.JsonParser.parseArray
Detailed Report: https://oss-fuzz.com/testcase?key=4744318480154624 Project: g-http-java-client Fuzzing Engine: libFuzzer Fuzz Target: JsonObjectParserFuzzer Job Type: libfuzzerasang-http-java-client Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...
itext7:PdfFuzzer: Security exception in com.itextpdf.kernel.pdf.PdfDictionary.get
Project: https://github.com/itext/itext7.git Detailed Report: https://oss-fuzz.com/testcase?key=4507884179554304 Project: itext7 Fuzzing Engine: libFuzzer Fuzz Target: PdfFuzzer Job Type: libfuzzerasanitext7 Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...
CVE-2022-4934
A post-auth command injection vulnerability in the exception wizard of Sophos Web Appliance older than version 4.3.10.4 allows administrators to execute arbitrary code...
CVE-2022-4934
A post-auth command injection vulnerability in the exception wizard of Sophos Web Appliance older than version 4.3.10.4 allows administrators to execute arbitrary code...
Command injection
A post-auth command injection vulnerability in the exception wizard of Sophos Web Appliance older than version 4.3.10.4 allows administrators to execute arbitrary code...
CVE-2022-4934
A post-auth command injection vulnerability in the exception wizard of Sophos Web Appliance older than version 4.3.10.4 allows administrators to execute arbitrary code...
CVE-2022-4934: Improper Neutralization of Special Elements used in a Command
A post-auth command injection vulnerability in the exception wizard of Sophos Web Appliance older than version 4.3.10.4 allows administrators to execute arbitrary code...
spring-data-mongodb:ParameterBindingJsonReaderFuzzer: Security exception in org.springframework.expression.spel.ast.OpPlus.getValueInternal
Project: https://github.com/spring-projects/spring-data-mongodb.git Detailed Report: https://oss-fuzz.com/testcase?key=4514946439577600 Project: spring-data-mongodb Fuzzing Engine: libFuzzer Fuzz Target: ParameterBindingJsonReaderFuzzer Job Type: libfuzzerasanspring-data-mongodb Platform Id: linu...
PT-2023-3276
Name of the Vulnerable Software and Affected Versions libheif version 1.15.1 Description A Segmentation fault caused by a floating point exception exists in libheif using crafted heif images via the heif::Fraction::round function in box.cc, which causes a denial of service. The vulnerability is...
fastjson2:JsonFuzzer: Security exception in com.alibaba.fastjson2.writer.ObjectWriterImplMap.write
Project: https://github.com/alibaba/fastjson2.git Detailed Report: https://oss-fuzz.com/testcase?key=4864057160368128 Project: fastjson2 Fuzzing Engine: libFuzzer Fuzz Target: JsonFuzzer Job Type: libfuzzerasanfastjson2 Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...