PT-2023-4900 · Eprosima +2 · Eprosima Fast Dds +2

Name of the Vulnerable Software and Affected Versions: eprosima Fast DDS versions prior to 2.10.0 and 2.6.5 Description: The issue is related to insufficient handling of exceptional states in the eprosima Fast DDS library, which is a C++ implementation of the Data Distribution Service standard of...

PT-2023-4899 · Eprosima +2 · Eprosima Fast Dds +2

Name of the Vulnerable Software and Affected Versions: eprosima Fast DDS versions prior to 2.11.0 eprosima Fast DDS versions prior to 2.10.2 eprosima Fast DDS versions prior to 2.9.2 eprosima Fast DDS versions prior to 2.6.5 Description: The issue is related to an error in exception handling in t...

PT-2023-35946 · Apache · Apache Poi

Name of the Vulnerable Software and Affected Versions: Apache POI affected versions not specified Description: A security exception crash has been reported in Apache POI, specifically in the org.apache.poi.hdgf.streams.PointerContainingStream.findChildren function. Recommendations: At the moment,...

Team Calendars is not loading Jira Agile Sprint Events

h3. Issue Summary Team Calendars is not loading Jira Agile Sprint Events This is reproducible on Data Center: yes h3. Steps to Reproduce Install Confluence 8.4.0 and Jira 9.9.1 Set up application link and sample Jira project Add Jira Agile Event h3. Expected Results Expect Jira Agile Events to...

OSV-2023-676 Security exception in com.github.javaparser.ast.visitor.CloneVisitor.visit

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61313 Crash type: Security exception Crash state: com.github.javaparser.ast.visitor.CloneVisitor.visit com.github.javaparser.ast.type.ClassOrInterfaceType.accept com.github.javaparser.ast.visitor.CloneVisitor.cloneNode...

CVE-2023-39341

"FFRI yarai", "FFRI yarai Home and Business Edition" and their OEM products handle exceptional conditions improperly, which may lead to denial-of-service DoS condition. Affected products and versions are as follows: FFRI yarai versions 3.4.0 to 3.4.6 and 3.5.0, FFRI yarai Home and Business Editio...

CVE-2023-39341

The CVE-2023-39341 issue affects FFRI yarai and related OEM products, where improper handling of exceptional conditions can cause a Denial-of-Service (DoS). Affected software families and versions include FFRI yarai (3.4.0–3.4.6, 3.5.0) and FFRI yarai Home and Business Edition (1.4.0), plus relat...

OSV-2023-665 Security exception in org.apache.poi.hdgf.streams.PointerContainingStream.findChildren

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61256 Crash type: Security exception Crash state: org.apache.poi.hdgf.streams.PointerContainingStream.findChildren org.apache.poi.util.IOUtils.checkLength org.apache.poi.util.IOUtils.safelyAllocateCheck...

OSV-2023-662 Security exception in org.apache.commons.io.IOUtils.byteArray

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61254 Crash type: Security exception Crash state: org.apache.commons.io.IOUtils.byteArray org.apache.commons.io.output.AbstractByteArrayOutputStream.needNewBuffer org.apache.commons.io.output.UnsynchronizedByteArrayOutputStrea...

OSV-2023-660 Security exception in org.apache.poi.hwpf.model.StyleSheet.createPap

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61252 Crash type: Security exception Crash state: org.apache.poi.hwpf.model.StyleSheet.createPap org.apache.poi.util.BitField.getRawValue org.apache.poi.util.BitField.getValue...

OSV-2023-636 Security exception in jflex.core.NFA.insertNFA

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61028 Crash type: Security exception Crash state: jflex.core.NFA.insertNFA jflex.core.NFA.insertNFA jflex.core.NFA.insertNFA...

CVE-2023-33370

An uncaught exception vulnerability exists in Control ID IDSecure 4.7.26.0 and prior, allowing attackers to cause the main web server of IDSecure to fault and crash, causing a denial of service...

CVE-2023-33370

An uncaught exception vulnerability exists in Control ID IDSecure 4.7.26.0 and prior, allowing attackers to cause the main web server of IDSecure to fault and crash, causing a denial of service...

Control ID IDSecure Security Vulnerability

Control ID IDSecure is software from Control ID that controls access to company personnel and vehicles of all sizes. A security vulnerability exists in Control ID IDSecure version 4.7.26.0 and prior versions that stems from the presence of an uncaught exception. An attacker exploiting this...

Potential Denial of Service exploit in Net-SNMP 5.8 through 5.9.3

handleipDefaultTTL in agent/mibgroup/ip-mib/ipscalars.c in Net-SNMP 5.8 through 5.9.3 has a NULL Pointer Exception bug that can be used by a remote attacker who has write access to cause the instance to crash via a crafted UDP packet, resulting in Denial of Service...

OSV-2023-627 Security exception in org.apache.lucene.util.automaton.RegExp.toAutomaton

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60964 Crash type: Security exception Crash state: org.apache.lucene.util.automaton.RegExp.toAutomaton java.base/java.util.BitSet.ensureCapacity java.base/java.util.BitSet.expandTo...

PT-2023-35928 · Apache · Apache Lucene

Name of the Vulnerable Software and Affected Versions: Apache Lucene affected versions not specified Description: The issue is related to a security exception in the org.apache.lucene.util.automaton.RegExp.toAutomaton function. It involves the java.base/java.util.BitSet.ensureCapacity and...

OSV-2023-619 Security exception in java.base/java.util.regex.Pattern$GroupTail.match

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60846 Crash type: Security exception Crash state: java.base/java.util.regex.Pattern$GroupTail.match java.base/java.io.BufferedWriter.ensureOpen java.base/java.io.BufferedWriter.write...

OSV-2023-618 Security exception in java.base/java.util.regex.Pattern$Loop.match

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60845 Crash type: Security exception Crash state: java.base/java.util.regex.Pattern$Loop.match java.base/java.util.regex.Pattern$GroupTail.match java.base/java.util.regex.Pattern$BranchConn.match...

OSV-2023-617 Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60844 Crash type: Security exception Crash state: com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr java.base/java.lang.Exception. java.base/java.lang.RuntimeException...