OSV-2025-348 Security exception in org.apache.lucene.analysis.miscellaneous.ConcatenateGraphFilter$BytesRefBuilderT

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=416302801 Crash type: Security exception Crash state: org.apache.lucene.analysis.miscellaneous.ConcatenateGraphFilter$BytesRefBuilderT org.apache.lucene.analysis.miscellaneous.ConcatenateGraphFilter$BytesRefBuilderT...

PT-2025-21906 · Git +1 · Lucene

Name of the Vulnerable Software and Affected Versions: Apache Lucene affected versions not specified Description: The software is susceptible to a security exception during the cloning of an AttributeSource$State object within the ConcatenateGraphFilter$BytesRefBuilderT class. The issue occurs wh...

EntireX DoS

The vulnerability of the software for integrating old and new technologies from IBM EntireX is related to an error in handling exceptional states. Exploiting this vulnerability can allow a perpetrator to trigger a service failure...

lucene:QueryParserFuzzer: Security exception in org.apache.lucene.analysis.miscellaneous.ConcatenateGraphFilter$BytesRefBuilderT

Detailed Report: https://oss-fuzz.com/testcase?key=6417885146972160 Project: lucene Fuzzing Engine: libFuzzer Fuzz Target: QueryParserFuzzer Job Type: libfuzzerasanlucene Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

RLSA-2024:5402 Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: Thunderbird: 115.14/128.1 mozilla: Fullscreen notification dialog can be obscured by document content CVE-2024-7518 mozilla: Out of bounds memory access in graphics shared memory handling CVE-2024-7519 mozilla: Type...

RockyLinux 8 : thunderbird (RLSA-2024:5402)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:5402 advisory. Thunderbird: 115.14/128.1 mozilla: Fullscreen notification dialog can be obscured by document content CVE-2024-7518 mozilla: Out of bounds memory access ...

Ensure That Old Passwords Are Verified When Users Change Them

To prevent a third party from maliciously changing the password of another user, the old password must be verified when a user changes the password. According to the common practice in the industry, the old password does not need to be verified when the root user changes its own password. The roo...

Ensure That Passwords Do Not Contain User Names

To ensure user security, you must configure passwords that do not contain user names. If a password is the same as the user name or the user name in reverse order, or contains the user name, attackers can guess the password easily. This requirement is not exerted on passwords of users whose names...

apache-commons-lang:LocaleUtilsFuzzer: Security exception in java.base/java.util.Arrays.copyOf

Detailed Report: https://oss-fuzz.com/testcase?key=5297402724810752 Project: apache-commons-lang Fuzzing Engine: libFuzzer Fuzz Target: LocaleUtilsFuzzer Job Type: libfuzzerasanapache-commons-lang Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

javaparser:parseFuzzer: Security exception in com.github.javaparser.GeneratedJavaParser.Expression

Project: https://github.com/javaparser/javaparser.git Detailed Report: https://oss-fuzz.com/testcase?key=5540974011154432 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Security exception Crash Address: Crash...

CBL Mariner 2.0 Security Update: kernel (CVE-2025-22063)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-22063 advisory. - In the Linux kernel, the following vulnerability has been resolved: netlabel: Fix NULL pointer exception...

Azure Linux 3.0 Security Update: kernel (CVE-2024-57939)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-57939 advisory. - In the Linux kernel, the following vulnerability has been resolved: riscv: Fix sleeping in invalid context i...

Espeak-ng 1.52-dev was discovered to contain a Floating Point Exception via the function PeaksToHarmspect at wavegen.c.

...

CVE-2025-20666

In Modem, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID...

CVE-2025-20666

CVE-2025-20666 affects MediaTek’s Modem component. The issue is an uncaught exception in Modem that can crash the system, enabling remote denial-of-service when a UE connects to a rogue base station; no user interaction or additional privileges are required. Patch MOLY00650610 (Issue MSV-2933) is...

MediaTek Chipsets 安全漏洞

MediaTek Chipsets is a series of chips from China's MediaTek Corporation MediaTek. A security vulnerability exists in MediaTek Chipsets that stems from an uncaught exception that could lead to a remote denial of service...

libsoup Heap Buffer Overflow DoS

The vulnerability of the sniffunknown function in the GNOME graphical interface library libsoup is related to insufficient checking of exceptional states. Exploiting this vulnerability could allow a remote attacker to cause a service failure by sending a specially crafted POST request...

feign:BodyTemplateFuzzer: Security exception in java.base/java.util.regex.Pattern$GroupTail.match

Project: https://github.com/openfeign/feign.git Detailed Report: https://oss-fuzz.com/testcase?key=5606160910843904 Project: feign Fuzzing Engine: libFuzzer Fuzz Target: BodyTemplateFuzzer Job Type: libfuzzerasanfeign Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

apache-commons-jxpath:JXPathFuzzer: Security exception in org.apache.commons.jxpath.ri.compiler.CoreFunction.toString

Detailed Report: https://oss-fuzz.com/testcase?key=5483190896885760 Project: apache-commons-jxpath Fuzzing Engine: libFuzzer Fuzz Target: JXPathFuzzer Job Type: libfuzzerasanapache-commons-jxpath Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

OSV-2025-323 Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=415382662 Crash type: Security exception Crash state: com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr java.base/java.lang.StringLatin1.getChars java.base/java.lang.String.getChars...