11120 matches found
javaparser:parseFuzzer: Uncaught exception in com.github.javaparser.ast.validator.TreeVisitorValidator.accept
Project: https://github.com/javaparser/javaparser.git Detailed Report: https://oss-fuzz.com/testcase?key=5348840772861952 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash...
spring-boot:BasicJsonParserFuzzer: Uncaught exception in org.springframework.boot.json.BasicJsonParser.parseMapInternal
Project: https://github.com/spring-projects/spring-boot.git Detailed Report: https://oss-fuzz.com/testcase?key=4818899018842112 Project: spring-boot Fuzzing Engine: libFuzzer Fuzz Target: BasicJsonParserFuzzer Job Type: libfuzzerasanspring-boot Platform Id: linux Crash Type: Uncaught exception...
apache-commons-configuration:YAMLConfigurationWriteFuzzer: Uncaught exception in org.yaml.snakeyaml.constructor.SafeConstructor.constructMapping2ndStep
Detailed Report: https://oss-fuzz.com/testcase?key=5953451405737984 Project: apache-commons-configuration Fuzzing Engine: libFuzzer Fuzz Target: YAMLConfigurationWriteFuzzer Job Type: libfuzzerasanapache-commons-configuration Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash...
Huawei MindSpore Community numeric error vulnerability
Huawei MindSpore Community is an open source deep learning framework from Huawei China.A numerical error vulnerability exists in versions prior to Huawei MindSpore Community 1.3.0, which stems from the fact that when performing the initialization operation of the Split operator, if a dimension in...
CVE-2022-34778
Jenkins TestNG Results Plugin 554.va4a552116332 and earlier renders the unescaped test descriptions and exception messages provided in test results if certain job-level options are set, resulting in a cross-site scripting XSS vulnerability exploitable by attackers able to configure jobs or contro...
apache-commons-configuration:XMLConfigurationLoadFuzzer: Uncaught exception in java.xml/com.sun.org.apache.xalan.internal.xsltc.trax.DOM2TO.parse
Detailed Report: https://oss-fuzz.com/testcase?key=5484141732298752 Project: apache-commons-configuration Fuzzing Engine: libFuzzer Fuzz Target: XMLConfigurationLoadFuzzer Job Type: libfuzzerasanapache-commons-configuration Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash...
PT-2022-22329 · Jenkins · Jenkins Testng Results Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins TestNG Results Plugin versions 554.va4a552116332 and earlier Description: The issue is related to a cross-site scripting XSS vulnerability. It occurs when the Jenkins TestNG Results Plugin renders unescaped test descriptions and...
CVE-2022-34778: Improper Neutralization of Input During Web Page Generation
Jenkins TestNG Results Plugin 554.va4a552116332 and earlier renders the unescaped test descriptions and exception messages provided in test results if certain job-level options are set, resulting in a cross-site scripting XSS vulnerability exploitable by attackers able to configure jobs or contro...
apache-commons-configuration:YAMLConfigurationWriteFuzzer: Uncaught exception in org.yaml.snakeyaml.constructor.SafeConstructor$ConstructYamlMap.construct
Detailed Report: https://oss-fuzz.com/testcase?key=5765799788281856 Project: apache-commons-configuration Fuzzing Engine: libFuzzer Fuzz Target: YAMLConfigurationWriteFuzzer Job Type: libfuzzerasanapache-commons-configuration Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash...
jackson-modules-java8:DatatypeFuzzer: Uncaught exception in DatatypeFuzzer.fuzzerTestOneInput
Project: https://github.com/FasterXML/jackson-modules-java8.git Detailed Report: https://oss-fuzz.com/testcase?key=5927101540204544 Project: jackson-modules-java8 Fuzzing Engine: libFuzzer Fuzz Target: DatatypeFuzzer Job Type: libfuzzerasanjackson-modules-java8 Platform Id: linux Crash Type:...
CVE-2021-33654
When performing the initialization operation of the Split operator, if a dimension in the input shape is 0, it will cause a division by 0 exception...
CVE-2021-33653
When performing the derivation shape operation of the SpaceToBatch operator, if there is a value of 0 in the parameter blockshape element, it will cause a division by 0 exception...
CVE-2021-33652
When the Reduce operator run operation is executed, if there is a value of 0 in the parameter axissizes element, it will cause a division by 0 exception...
CVE-2021-33651
When performing the analytical operation of the DepthwiseConv2D operator, if the attribute depthmultiplier is 0, it will cause a division by 0 exception...
CVE-2021-33653
When performing the derivation shape operation of the SpaceToBatch operator, if there is a value of 0 in the parameter blockshape element, it will cause a division by 0 exception...
CVE-2021-33654
When performing the initialization operation of the Split operator, if a dimension in the input shape is 0, it will cause a division by 0 exception...
CVE-2021-33654
CVE-2021-33654 affects Huawei MindSpore Community (open‑source deep learning framework). The issue occurs during the initialization of the Split operator when an input shape dimension is 0, causing a division by zero exception. Public references across multiple databases reiterate this root cause...
CVE-2021-33653
MindSpore SpaceToBatch derivation shape bug CVE-2021-33653: a value of 0 in block_shape triggers a divide-by-zero during the derivation operation. Documentation across sources (including Red Hat and CNNVD) links this to Huawei MindSpore Community prior to 1.3.0. Remediation is to upgrade to versi...
CVE-2021-33651
CVE-2021-33651 affects the DepthwiseConv2D operator in MindSpore (Huawei MindSpore Community context). The root cause described across sources is a division by zero when the attribute depth_multiplier is 0. Public records indicate a potential availability impact (NVD CVSS 3.1 vector shows HIGH im...
