9195 matches found
CVE-2022-40160
DISPUTED This record was originally reported by the oss-fuzz project who failed to consider the security context in which JXPath is intended to be used and failed to contact the JXPath maintainers prior to requesting the CVE allocation. The CVE was then allocated by Google in breach of the CNA...
Design/Logic Flaw
DISPUTED This record was originally reported by the oss-fuzz project who failed to consider the security context in which JXPath is intended to be used and failed to contact the JXPath maintainers prior to requesting the CVE allocation. The CVE was then allocated by Google in breach of the CNA...
CVE-2022-40159
DISPUTED This record was originally reported by the oss-fuzz project who failed to consider the security context in which JXPath is intended to be used and failed to contact the JXPath maintainers prior to requesting the CVE allocation. The CVE was then allocated by Google in breach of the CNA...
UBUNTU-CVE-2022-40160
DISPUTED This record was originally reported by the oss-fuzz project who failed to consider the security context in which JXPath is intended to be used and failed to contact the JXPath maintainers prior to requesting the CVE allocation. The CVE was then allocated by Google in breach of the CNA...
CVE-2022-40161
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
CVE-2022-41852
Removed by vendor...
CVE-2022-40158
Removed by vendor...
CVE-2022-40157
Removed by vendor...
ndpi:fuzz_ndpi_reader: Heap-buffer-overflow in ndpi_search_irc_tcp
Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=4761844585988096 Project: ndpi Fuzzing Engine: afl Fuzz Target: fuzzndpireader Job Type: aflasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 9 Crash Address: 0x60600068fed9 Crash State:...
hunspell:affdicfuzzer: Heap-use-after-free in AffixMgr::defcpd_check
Project: https://github.com/hunspell/hunspell.git Detailed Report: https://oss-fuzz.com/testcase?key=4737692206497792 Project: hunspell Fuzzing Engine: libFuzzer Fuzz Target: affdicfuzzer Job Type: libfuzzerasani386hunspell Platform Id: linux Crash Type: Heap-use-after-free READ 2 Crash Address:...
OSV-2022-1018 Index-out-of-bounds in LibRaw::kodak_radc_load_raw
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52139 Crash type: Index-out-of-bounds Crash state: LibRaw::kodakradcloadraw LibRaw::unpack LoadRAW...
CVE-2022-40159
CVE-2022-40159 concerns a DoS due to a stack-based buffer overflow in parsing XPath by JXPath. The CVE entry is explicitly marked as DISPUTED/invalid in multiple sources (NVD OSV/GHSA withdrawals), and no confirmatory public technical details are provided beyond the described overflow. IBM bullet...
CVE-2022-40160 Stack Overflow in JXPath
DISPUTED This record was originally reported by the oss-fuzz project who failed to consider the security context in which JXPath is intended to be used and failed to contact the JXPath maintainers prior to requesting the CVE allocation. The CVE was then allocated by Google in breach of the CNA...
CVE-2022-40160
Removed by vendor...
CVE-2022-40159
Removed by vendor...
CVE-2022-40160
CVE-2022-40160 describes a Denial of Service in JXPath due to a stack-based buffer overflow while parsing XPath. Connected IBM bulletins note this affects IBM Content Navigator components (JXPath package) and provide remediation: upgrade to IBM Content Navigator 3.0.12 IF004 or 3.0.11 IF008 plus ...
CVE-2022-40159
DISPUTED This record was originally reported by the oss-fuzz project who failed to consider the security context in which JXPath is intended to be used and failed to contact the JXPath maintainers prior to requesting the CVE allocation. The CVE was then allocated by Google in breach of the CNA...
CVE-2022-40159 Stack Overflow in JXPath
DISPUTED This record was originally reported by the oss-fuzz project who failed to consider the security context in which JXPath is intended to be used and failed to contact the JXPath maintainers prior to requesting the CVE allocation. The CVE was then allocated by Google in breach of the CNA...
ghostscript:gs_device_pdfwrite_fuzzer: Stack-buffer-underflow in gs_type2_interpret
Detailed Report: https://oss-fuzz.com/testcase?key=5215827964329984 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicepdfwritefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Stack-buffer-underflow READ 4 Crash Address: 0x7ffcea12c39c Crash State:...