1362 matches found
GitHub Security Lab: [Python]: CWE-117 Log Injection
This bug was reported directly to GitHub Security Lab...
GitHub Security Lab: [Java] CWE-502: Unsafe deserialization with three JSON frameworks
This bug was reported directly to GitHub Security Lab...
CVE-2021-3321
Integer Underflow in Zephyr in IEEE 802154 Fragment Reassembly Header Removal. Zephyr versions = =2.4.0 contain Integer Overflow to Buffer Overflow CWE-680. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-w44j-66g7-xw99...
Insecure random number generation in keypair
Description and Impact A bug in the pseudo-random number generator used by keypair versions up to and including 1.0.3 could allow for weak RSA key generation. This could enable an attacker to decrypt confidential messages or gain authorized access to an account belonging to the victim. We recomme...
GitHub Security Lab: [Python] CWE-348: Client supplied ip used in security check
This bug was reported directly to GitHub Security Lab...
GitHub Security Lab: [Java] CWE-200: Query to detect exposure of sensitive information from android file intent
This bug was reported directly to GitHub Security Lab...
GitHub Security Lab: [Python] CWE-522: Insecure LDAP Authentication
This bug was reported directly to GitHub Security Lab...
GitHub Security Lab: New experimental query: Clipboard-based XSS
This bug was reported directly to GitHub Security Lab...
GitHub Security Lab: ihsinme: Add query for CWE-758 Reliance on Undefined, Unspecified, or Implementation-Defined Behavior
This bug was reported directly to GitHub Security Lab...
GitHub Security Lab: [Java] CWE-079: Query to detect XSS with JavaServer Faces (JSF)
This bug was reported directly to GitHub Security Lab...
GitHub Security Lab: [Java]: Add XXE sinks
This bug was reported directly to GitHub Security Lab...
GitHub Security Lab: Java: Static initialization vector
This bug was reported directly to GitHub Security Lab...
GitHub Security Lab: [C#]: Deserialization sinks
This bug was reported directly to GitHub Security Lab...
GitHub Security Lab: Java: Timing attacks while comparing results of cryptographic operations
This bug was reported directly to GitHub Security Lab...
GitHub Security Lab: [C#]: HttpOnly and Secure Cookies for .NET Core and .NET
This bug was reported directly to GitHub Security Lab...
Exploit for Deserialization of Untrusted Data in Apache Ofbiz
CVE-2020-9496 Because the 2 xmlrpc related requets in webtools...
GitHub Security Lab: [Java] CWE-601: Add Spring URL Redirect ResponseEntity sink
This bug was reported directly to GitHub Security Lab...
GitHub Security Lab: [Python]: Add SqlAlchemy support for SQL injection query
This bug was reported directly to GitHub Security Lab...