libfuse-lite Fuse Kernel Code Execution

The vulnerability of the fusekernmount function in the libfuse-lite library, implemented in the NTFS file system, affects the FUSE module NTFS-3G. This vulnerability involves returning an incorrect process status code. Exploiting this vulnerability could allow an attacker to execute arbitrary cod...

CVE-2020-15223

In ORY Fosite the security first OAuth2 & OpenID Connect framework for Go before version 0.34.0, the TokenRevocationHandler ignores errors coming from the storage. This can lead to unexpected 200 status codes indicating successful revocation while the token is still valid. Whether an attacker can...

CVE-2020-1710: Undefined Security Weakness

The issue appears to be that JBoss EAP 6.4.21 does not parse the field-name in accordance to RFC72301 as it returns a 200 instead of a 400...