jackson-databind:ReadTreeFuzzer: Uncaught exception in com.fasterxml.jackson.databind.node.ArrayNode.serialize

Project: https://github.com/FasterXML/jackson-databind.git Detailed Report: https://oss-fuzz.com/testcase?key=6442829735395328 Project: jackson-databind Fuzzing Engine: libFuzzer Fuzz Target: ReadTreeFuzzer Job Type: libfuzzerasanjackson-databind Platform Id: linux Crash Type: Uncaught exception...

WEM 2203: Citrix WEM Service Citrix.Wem.Agent.Service.exe crash

After installing WEM Agent version 2203, the following system events are logged in the VDA: Event ID 1026: .NET Runtime Application: Citrix.Wem.Agent.Service.exe Framework Version: v4.0.30319 Description: The process was terminated due to an unhandled exception. and Event ID 1000: Faulting...

arrow-java:FuzzIpcStream: Uncaught exception in java.base/java.nio.Bits.reserveMemory

Detailed Report: https://oss-fuzz.com/testcase?key=4884875311710208 Project: arrow-java Fuzzing Engine: libFuzzer Fuzz Target: FuzzIpcStream Job Type: libfuzzerasanarrow-java Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State: java.base/java.nio.Bits.reserveMemory...

Denial of Service via Attachment Upload

Description An attacker can upload an attachment without any size limitation which leads to an exception and the crash of the application. Proof of Concept 1. 1 - Log in and select and project and card. 2. 2 - Upload a file, in this case, a 5GB file. Used sample file. 3. 3 - After some seconds th...

javaparser:parseFuzzer: Uncaught exception in com.github.javaparser.GeneratedJavaParser.Expression

Project: https://github.com/javaparser/javaparser.git Detailed Report: https://oss-fuzz.com/testcase?key=5722007471259648 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash...

PT-2022-37158

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to an uncaught exception in the com.code intelligence.jazzer.sanitizers.RegexInjection class, specifically in the hookInternal and...

Uncaught Exception

Overview std/math/big is a Go standard library package std/math/big Affected versions of this package are vulnerable to Uncaught Exception. Go Vulnerability Report:Decoding big.Float and big.Rat types can panic if the encoded message is too short, potentially allowing a denial of service...

CVE-2022-31189 "Internal System Error" page in DSpace JSPUI prints exceptions and stack traces without sanitization

DSpace open source software is a repository application which provides durable access to digital resources. dspace-jspui is a UI component for DSpace. When an "Internal System Error" occurs in the JSPUI, then entire exception including stack trace is available. Information in this stacktrace may ...

antlr4-java:GrammarFuzzer: Uncaught exception in com.code_intelligence.jazzer.sanitizers.RegexInjection.hookInternal

Detailed Report: https://oss-fuzz.com/testcase?key=5963311887286272 Project: antlr4-java Fuzzing Engine: libFuzzer Fuzz Target: GrammarFuzzer Job Type: libfuzzerasanantlr4-java Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State:...

javaparser:parseFuzzer: Uncaught exception in com.github.javaparser.GeneratedJavaParser.Expression

Detailed Report: https://oss-fuzz.com/testcase?key=6355158195372032 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State:...

fastjson2:JsonFuzzer: Uncaught exception in com.alibaba.fastjson.JSONPath.getPropertyValue

Detailed Report: https://oss-fuzz.com/testcase?key=6342948551262208 Project: fastjson2 Fuzzing Engine: libFuzzer Fuzz Target: JsonFuzzer Job Type: libfuzzerasanfastjson2 Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State: com.alibaba.fastjson.JSONPath.getPropertyValue...

GHSA-2CPX-6PQP-WF35 fs2-io skips mTLS client verification

Impact When establishing a server-mode TLSSocket using fs2-io on Node.js, the parameter requestCert = true is ignored, peer certificate verification is skipped, and the connection proceeds. The vulnerability is limited to: 1. fs2-io running on Node.js. The JVM TLS implementation is completely...

spring-boot:BasicJsonParserFuzzer: Uncaught exception in org.springframework.boot.json.BasicJsonParser.parseMapInternal

Project: https://github.com/spring-projects/spring-boot.git Detailed Report: https://oss-fuzz.com/testcase?key=4583852512772096 Project: spring-boot Fuzzing Engine: libFuzzer Fuzz Target: BasicJsonParserFuzzer Job Type: libfuzzerasanspring-boot Platform Id: linux Crash Type: Uncaught exception...

Nextcloud: Exception logging in Sharepoint app reveals clear-text connection details

Summary: On Exceptions thrown in the context of the SharePoint app, connection credentials may be written to the Nextcloud log in clear text. Steps To Reproduce: Attempt to configure a sharepoint mount in an erroneous way. Supporting Material/References: was files publically:...

fastjson2:JsonFuzzer: Uncaught exception in java.base/java.util.ArrayList.hashCodeRange

Detailed Report: https://oss-fuzz.com/testcase?key=4802318213709824 Project: fastjson2 Fuzzing Engine: libFuzzer Fuzz Target: JsonFuzzer Job Type: libfuzzerasanfastjson2 Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State: java.base/java.util.ArrayList.hashCodeRange...

apache-commons-configuration:YAMLConfigurationReadFuzzer: Uncaught exception in java.base/java.util.ArrayList.hashCode

Detailed Report: https://oss-fuzz.com/testcase?key=4663968274186240 Project: apache-commons-configuration Fuzzing Engine: libFuzzer Fuzz Target: YAMLConfigurationReadFuzzer Job Type: libfuzzerasanapache-commons-configuration Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash...

apache-commons-configuration:YAMLConfigurationReadFuzzer: Uncaught exception in java.base/java.util.regex.Pattern$Ques.match

Detailed Report: https://oss-fuzz.com/testcase?key=4768603995504640 Project: apache-commons-configuration Fuzzing Engine: libFuzzer Fuzz Target: YAMLConfigurationReadFuzzer Job Type: libfuzzerasanapache-commons-configuration Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash...

apache-commons-configuration:YAMLConfigurationReadFuzzer: Uncaught exception in java.base/java.util.regex.Pattern$GroupHead.match

Detailed Report: https://oss-fuzz.com/testcase?key=5022621716054016 Project: apache-commons-configuration Fuzzing Engine: libFuzzer Fuzz Target: YAMLConfigurationReadFuzzer Job Type: libfuzzerasanapache-commons-configuration Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash...

apache-commons-jxpath:JXPathFuzzer: Uncaught exception in java.base/java.lang.StringBuffer.append

Detailed Report: https://oss-fuzz.com/testcase?key=5062161688297472 Project: apache-commons-jxpath Fuzzing Engine: libFuzzer Fuzz Target: JXPathFuzzer Job Type: libfuzzerasanapache-commons-jxpath Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State:...

antlr4-java:GrammarFuzzer: Uncaught exception in com.code_intelligence.jazzer.sanitizers.RegexInjection.hookInternal

Detailed Report: https://oss-fuzz.com/testcase?key=4815566107443200 Project: antlr4-java Fuzzing Engine: libFuzzer Fuzz Target: GrammarFuzzer Job Type: libfuzzerasanantlr4-java Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State:...