CVE-2021-33562: Improper Neutralization of Input During Web Page Generation

A reflected cross-site scripting XSS vulnerability in Shopizer before 2.17.0 allows remote attackers to inject arbitrary web script or HTML via the ref parameter to a page about an arbitrary product, e.g., a product/insert-product-name-here.html/ref= URL...

Shopizer 跨站脚本漏洞

Shopizer is a Java open source e-commerce software. A cross-site scripting vulnerability exists in Shopizer versions prior to 2.17.0. A remote attacker can exploit this vulnerability by using the ref parameter to inject arbitrary Web script or HTML into a page about any product...

PT-2021-20205

Name of the Vulnerable Software and Affected Versions Shopizer versions prior to 2.17.0 Description A reflected cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the ref parameter to a page about an arbitrary product, for example, a...

PT-2021-11751

Name of the Vulnerable Software and Affected Versions: Courier Management System version 1.0 Description: A SQL injection issue was found, which can be exploited through the ref no parameter in a POST request to the "admin class.php" endpoint. This allows for potential unauthorized access and...

SourceCodester Courier Management System SQL注入漏洞

SourceCodester Courier Management System is an application program of SourceCodester. The system provides management functionality. An SQL injection vulnerability exists in Courier Management System 1.0, which originates in the ref no POST parameter of admin class.php...

Rust Code Issues Vulnerabilities

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A code issue vulnerability exists in Rust futures-task crate before 0.3.5, which stems from a noop waker ref that allows null pointer dereferencing...

Exploitability Analysis: Smash the Ref Bug Class

In April 2020, security researcher Gil Dabah published a paper on a set of vulnerabilities he had discovered within the Win32k subsystem of the Windows operating system. These vulnerabilities demonstrated instances of a new class of bugs, dubbed “Smash the Ref.” Dabah’s research included 13 test...

PT-2020-6432

Name of the Vulnerable Software and Affected Versions JerryScript version 2.4.0 Description The issue is related to a heap-use-after-free in the ecma bytecode ref function of the ecma-helpers.c file. This can be exploited by a remote attacker to cause a denial of service. The estimated number of...

PT-2020-22298

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a stack-buffer-overflow crash. Technical details include a crash type of Stack-buffer-overflow WRITE 4, and the crash state involve...

PT-2020-22168

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-use-after-free error, specifically a WRITE 4 crash type. The crash state involves CRYPTO DOWN REF, DH free, and evp pkey fre...

PT-2020-22231

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-use-after-free error, specifically a WRITE 4 crash type. The crash state involves CRYPTO DOWN REF, DH free, and evp pkey fre...

PT-2020-11544

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a possible infinite loop in the ihevcd ref list function due to a missing bounds check. This could lead to a remote denial of service, and user interaction is required for...

PT-2020-6406

Name of the Vulnerable Software and Affected Versions JerryScript version 2.2.0 Description The issue is related to a heap-use-after-free in the ecma ref ecma string function at ecma-helpers-string.c:772. This can allow a remote attacker to access confidential data, compromise data integrity, and...

GHSA-FQWF-PJWF-7VQV jackson-databind mishandles the interaction between serialization gadgets and typing

FasterXML jackson-databind 2.x before 2.9.10.4 and 2.6.7.4 mishandles the interaction between serialization gadgets and typing, related to com.caucho.config.types.ResourceRef aka caucho-quercus...

`array!` macro is unsound in presence of traits that implement methods it calls internally

Affected versions of this crate called some methods using auto-ref. The affected code looked like this. rust let mut arr = $crate::core::mem::MaybeUninit::uninit; let mut vec = $crate::ArrayVec::::newarr.asmutptr as mut T; In this case, the problem is that asmutptr is a method of &mut MaybeUninit...

DEBIAN-CVE-2020-10673

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.caucho.config.types.ResourceRef aka caucho-quercus...

UBUNTU-CVE-2020-10673

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.caucho.config.types.ResourceRef aka caucho-quercus...

UBUNTU-CVE-2019-20422

In the Linux kernel before 5.3.4, fib6rulelookup in net/ipv6/ip6fib.c mishandles the RT6LOOKUPFDSTNOREF flag in a reference-count decision, leading to for example a crash that was identified by syzkaller, aka CID-7b09c2d052db...

CVE-2019-15932

Intesync Solismed 3.3sp has Incorrect Access Control...

PT-2019-16306

Name of the Vulnerable Software and Affected Versions Android versions 8.0 through 10 Description The issue is related to a missing bounds check in the ihevcd ref list function of ihevcd ref list.c, which could lead to an out of bounds write. This might result in remote code execution without...