TYPO3 日志信息泄露漏洞

TYPO3 is a free and open source content management system framework CMS/CMF from the Swiss TYPO3 Association. A log message disclosure vulnerability exists in TYPO3, which arises from the fact that internal system credentials or keys can be logged in plaintext in an exception handler, and affects...

guice:InjectorFuzzer: Uncaught exception in jaz.Zer.<clinit>

Project: https://github.com/google/guice.git Detailed Report: https://oss-fuzz.com/testcase?key=5750316273893376 Project: guice Fuzzing Engine: libFuzzer Fuzz Target: InjectorFuzzer Job Type: libfuzzerasanguice Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State: jaz.Zer...

OSV-2022-467 Security exception in jaz.Zer.<clinit>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47914 Crash type: Security exception Crash state: jaz.Zer. java.base/java.lang.Class.forName0 java.base/java.lang.Class.forName...

PT-2022-37027

Name of the Vulnerable Software and Affected Versions java.base affected versions not specified Description A security exception crash has been reported. The crash occurs in the jaz.Zer class during the initialization process, specifically in the java.lang.Class.forName0 and java.lang.Class.forNa...

xmlpull:PullParserFactoryFuzzer: Uncaught exception in jaz.Zer.<clinit>

Project: https://github.com/xmlpull-org/xmlpull-api-v1.git Detailed Report: https://oss-fuzz.com/testcase?key=5118590539399168 Project: xmlpull Fuzzing Engine: libFuzzer Fuzz Target: PullParserFactoryFuzzer Job Type: libfuzzerasanxmlpull Platform Id: linux Crash Type: Uncaught exception Crash...

guice:InjectorFuzzer: Uncaught exception in jaz.Zer.<clinit>

Detailed Report: https://oss-fuzz.com/testcase?key=4685690618642432 Project: guice Fuzzing Engine: libFuzzer Fuzz Target: InjectorFuzzer Job Type: libfuzzerasanguice Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State: jaz.Zer. java.base/java.lang.Class.forName0...

archaius-core:DynamicPropertyFuzzer: Uncaught exception in java.base/java.util.regex.Matcher.<init>

Detailed Report: https://oss-fuzz.com/testcase?key=5087391905349632 Project: archaius-core Fuzzing Engine: libFuzzer Fuzz Target: DynamicPropertyFuzzer Job Type: libfuzzerasanarchaius-core Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State:...

SUSE-SU-2022:2015-1 Security update for gcc48

This update for gcc48 fixes the following issues: - CVE-2019-14250: Fixed an integer overflow that could lead to an invalid memory access bsc1142649. Non-security fixes: - Fixed an issue with manual page builds bsc1185395. - Fixed an issue with static initializers bsc1177947. - Fixed an issue wit...

OSV-2022-463 Uncaught exception in com.ctc.wstx.dtd.FullDTDReader.readContentSpec

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47865 Crash type: Uncaught exception Crash state: com.ctc.wstx.dtd.FullDTDReader.readContentSpec com.ctc.wstx.util.PrefixedName.hashCode java.base/java.util.HashMap.hash...

PT-2022-37026

Name of the Vulnerable Software and Affected Versions No specific software or version information is provided in the input description. Description The issue is related to an uncaught exception in the com.ctc.wstx.dtd.FullDTDReader.readContentSpec function, which is called from...

xstream:XmlFuzzer: Uncaught exception in com.ctc.wstx.dtd.FullDTDReader.readContentSpec

Project: https://github.com/x-stream/xstream.git Detailed Report: https://oss-fuzz.com/testcase?key=5496762753744896 Project: xstream Fuzzing Engine: libFuzzer Fuzz Target: XmlFuzzer Job Type: libfuzzerasanxstream Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State:...

PT-2022-28242

Name of the Vulnerable Software and Affected Versions PocketMine-MP versions prior to the version containing the patch 5fd685e07d61ef670584ed11a52fd5f4b99a81a7 Description The issue arises from a workaround implemented for unmapped network items, allowing arbitrary item IDs to be written into an...

javaparser:parseFuzzer: Uncaught exception in com.github.javaparser.GeneratedJavaParser.Expression

Project: https://github.com/javaparser/javaparser.git Detailed Report: https://oss-fuzz.com/testcase?key=5723326934286336 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash...

Huawei CV81-WDM FW Input Validation Insufficiency Vulnerability

The Huawei CV81-WDM FW is a laser multifunction printer from Huawei China. The Huawei CV81-WDM FW suffers from an Insufficient Input Validation vulnerability. An attacker can exploit this vulnerability to cause a service exception...

OSV-2022-458 Uncaught exception in com.ctc.wstx.dtd.FullDTDReader.readContentSpec

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47797 Crash type: Uncaught exception Crash state: com.ctc.wstx.dtd.FullDTDReader.readContentSpec java.base/java.util.HashMap.get com.ctc.wstx.dtd.FullDTDReader.findSharedName...

OSV-2022-455 Uncaught exception in com.ctc.wstx.dtd.FullDTDReader.readContentSpec

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47796 Crash type: Uncaught exception Crash state: com.ctc.wstx.dtd.FullDTDReader.readContentSpec java.base/java.lang.String.getChars java.base/java.io.StringReader.read...

PT-2022-37020

Name of the Vulnerable Software and Affected Versions No specific software or version information is provided in the input descriptions. Description The issue is related to an uncaught exception in the com.ctc.wstx.dtd.FullDTDReader.readContentSpec function, which is triggered by a crash in the...

PT-2022-37023

Name of the Vulnerable Software and Affected Versions No specific software or version information is provided in the input descriptions. Description The issue is related to an uncaught exception in the com.ctc.wstx.dtd.FullDTDReader class, specifically in the readContentSpec method. The crash sta...

javaparser:parseFuzzer: Uncaught exception in com.github.javaparser.ast.expr.Name.accept

Detailed Report: https://oss-fuzz.com/testcase?key=5768632505860096 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State: com.github.javaparser.ast.expr.Name.accept...

xstream:XmlFuzzer: Uncaught exception in com.ctc.wstx.dtd.FullDTDReader.readContentSpec

Project: https://github.com/x-stream/xstream.git Detailed Report: https://oss-fuzz.com/testcase?key=6605769950232576 Project: xstream Fuzzing Engine: libFuzzer Fuzz Target: XmlFuzzer Job Type: libfuzzerasanxstream Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State:...