hostap/ap-mgmt-fuzzer: Crash in hostapd_is_dfs_required

Project: git://w1.fi/srv/git/hostap.git Detailed report: https://oss-fuzz.com/testcase?key=5666753884979200 Project: hostap Fuzzer: aflhostapap-mgmt-fuzzer Fuzz target binary: ap-mgmt-fuzzer Job Type: aflasanhostap Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f6600000018 Crash...

hostap/ap-mgmt-fuzzer: Heap-buffer-overflow in ssid_match

Project: git://w1.fi/srv/git/hostap.git Detailed report: https://oss-fuzz.com/testcase?key=5206623624101888 Project: hostap Fuzzer: libFuzzerhostapap-mgmt-fuzzer Fuzz target binary: ap-mgmt-fuzzer Job Type: libfuzzerasanhostap Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

Code injection

Vulnerability in the PeopleSoft Enterprise ELM component of Oracle PeopleSoft Products subcomponent: Enterprise Learning Mgmt. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft...

CVE-2019-2700: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise ELM component of Oracle PeopleSoft Products subcomponent: Enterprise Learning Mgmt. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft...

PT-2019-9675

Name of the Vulnerable Software and Affected Versions Vignette Content Management version 6 Description The issue allows for remote access to administrator privileges by discovering the admin password in the "vgn/ccb/user/mgmt/user/edit/0,1628,0,00.html?uid=admin" HTML source code, and then...

Security Bulletin: Multiple vulnerabilities have been identified in DB2 that affect the IBM Performance Management product

Summary DB2 contains several vulnerabilities which can affect the IBM Performance Management product. Some of the information about security vulnerabilities affecting DB2 has been published in security bulletins. Vulnerability Details CVEID: CVE-2017-1571 DESCRIPTION: IBM DB2 for Linux, UNIX and...

PT-2018-17170

Name of the Vulnerable Software and Affected Versions: Android versions prior to security patch level 2018-06-05 Description: A buffer overflow can potentially occur while processing the HTT T2H MSG TYPE MGMT TX COMPL IND message in Android releases that use the linux kernel. Recommendations: For...

Security Bulletin: Security Vulnerabilities Addressed in Asset and Service Mgmt

Summary HTTP Response Splitting, Information Disclosure, SQL Injection, Security Bypass, Inadequate/Poor Input Control, Cross Site Scripting, and Gain Privileges vulnerabilities in Maximo Asset Mgmt, Tivoli Asset Mgmt for IT, Tivoli Service Request Mgr, Change and Configuration Mgmt Database, and...

Security Vulnerabilities Addressed in Asset and Service Mgmt

Abstract Security Bulletin: Vulnerabilities in Maximo Asset Mgmt, Tivoli Asset Mgmt for IT, Tivoli Service Request Mgr, Change and Configuration Mgmt Database, and SmartCloud Control Desk. See Details for CVE IDs. Content VULNERABILITY DETAILS: CVE ID: CVE-2012-0714, CVE-2012-0727, CVE-2012-0728,...

Design/Logic Flaw

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, due to the lack of a range check on the array index into the WMI descriptor pool, arbitrary address execution may potentially occur in the process mgmt completion handler...

CVE-2017-14889

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, due to the lack of a range check on the array index into the WMI descriptor pool, arbitrary address execution may potentially occur in the process mgmt completion handler...

CVE-2017-14889: Improper Validation of Array Index

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, due to the lack of a range check on the array index into the WMI descriptor pool, arbitrary address execution may potentially occur in the process mgmt completion handler...

PT-2018-6642

Name of the Vulnerable Software and Affected Versions: Android for MSM versions affected versions not specified Firefox OS for MSM versions affected versions not specified QRD Android versions affected versions not specified Description: The issue arises from improper input validation in the wma...

Buffer overflow

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a potential buffer overflow can happen when processing any 802.11 MGMT frames like Auth frame in limProcessAuthFrame...

CVE-2017-15815

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a potential buffer overflow can happen when processing any 802.11 MGMT frames like Auth frame in limProcessAuthFrame...

CVE-2017-15815

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a potential buffer overflow can happen when processing any 802.11 MGMT frames like Auth frame in limProcessAuthFrame...

CVE-2017-15815

CVE-2017-15815 describes a potential buffer overflow in the WLAN processing path of Android for MSM, Firefox OS for MSM, and QRD Android builds using CAF Linux kernel, specifically when handling 802.11 MGMT frames (e.g., Auth) inside limProcessAuthFrame. The issue is triggered during processing o...

CVE-2017-15815: Improper Restriction of Operations within the Bounds of a Memory Buffer

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a potential buffer overflow can happen when processing any 802.11 MGMT frames like Auth frame in limProcessAuthFrame...

Oracle Database Server Streams, AQ & Replication Mgmt Component Unspecified Vulnerability

Oracle Database Server is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2017-15815

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a potential buffer overflow can happen when processing any 802.11 MGMT frames like Auth frame in limProcessAuthFrame...