12516 matches found
javaparser:parseFuzzer: Security exception in com.github.javaparser.GeneratedJavaParser.Expression
Project: https://github.com/javaparser/javaparser.git Detailed Report: https://oss-fuzz.com/testcase?key=4768506768130048 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Security exception Crash Address: Crash...
GSD-2022-1005534 drm/amd/display: Check correct bounds for stream encoder instances for DCN303
drm/amd/display: Check correct bounds for stream encoder instances for DCN303 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.63 by commit...
CVE-2020-25491
6Kare Emakin 5.0.341.0 is affected by Cross Site Scripting XSS via the /rpc/membership/setProfile DisplayName field, which is mishandled when rendering the Activity Stream page...
CVE-2020-25491
6Kare Emakin 5.0.341.0 is affected by Cross Site Scripting XSS via the /rpc/membership/setProfile DisplayName field, which is mishandled when rendering the Activity Stream page...
Cross site scripting
6Kare Emakin 5.0.341.0 is affected by Cross Site Scripting XSS via the /rpc/membership/setProfile DisplayName field, which is mishandled when rendering the Activity Stream page...
CVE-2020-25491
6Kare Emakin 5.0.341.0 is affected by Cross Site Scripting XSS via the /rpc/membership/setProfile DisplayName field, which is mishandled when rendering the Activity Stream page...
CVE-2020-25491: Improper Neutralization of Input During Web Page Generation
6Kare Emakin 5.0.341.0 is affected by Cross Site Scripting XSS via the /rpc/membership/setProfile DisplayName field, which is mishandled when rendering the Activity Stream page...
PT-2022-8713
Name of the Vulnerable Software and Affected Versions 6Kare Emakin version 5.0.341.0 Description The issue is related to Cross Site Scripting XSS via the "/rpc/membership/setProfile" endpoint, specifically the DisplayName field, which is mishandled when rendering the Activity Stream page...
Buffer overflow
Certain The MPlayer Project products are vulnerable to Buffer Overflow via function asfinitaudiostream of libmpdemux/asfheader.c. This affects mplayer SVN-r38374-13.0.1 and mencoder SVN-r38374-13.0.1...
Archive_Tar: improper filename sanitization leads to file overwrites
A flaw was found in the ArchiveTar package. PEAR ArchiveTar could allow a local authenticated attacker to bypass security restrictions caused by a stream-wrapper attack. An attacker can overwrite arbitrary files on the system using a specially-crafted tar archive...
UBUNTU-CVE-2022-40737
An issue was discovered in Bento4 through 1.6.0-639. A buffer over-read exists in the function AP4StdcFileByteStream::WritePartial located in System/StdC/Ap4StdCFileByteStream.cpp, called from AP4ByteStream::Write and AP4HdlrAtom::WriteFields...
Bento4 buffer error vulnerability
Bento4 is an open source C++ library for reading and writing MP4 files. A security vulnerability exists in Bento4 version 1.6.0-639, which stems from its AP4ByteStream::Write and AP4HdlrAtom::WriteFields components calling the System/StdC/Ap4StdCFileByteStream.cpp component's AP4...
CVE-2022-40439
An memory leak issue was discovered in AP4StdcFileByteStream::Create in mp42ts in Bento4 v1.6.0-639, allows attackers to cause a denial of service via a crafted file...
UBUNTU-CVE-2022-40439
An memory leak issue was discovered in AP4StdcFileByteStream::Create in mp42ts in Bento4 v1.6.0-639, allows attackers to cause a denial of service via a crafted file...
UBUNTU-CVE-2022-40438
Buffer overflow vulnerability in function AP4MemoryByteStream::WritePartial in mp42aac in Bento4 v1.6.0-639, allows attackers to cause a denial of service via a crafted file...
CLSA-2022-1663183381 Fixed CVE-2022-2526 in systemd
CVE-2022-2526: use unref the DnsStream in callbacks correctly...
Bento4 security vulnerabilities
Bento4 is an open source C++ library for reading and writing MP4 files. A security vulnerability exists in Bento4 v1.6.0-639, which originates from a denial of service due to a memory leak in the AP4StdcFileByteStream::Create function of its mp42ts component that can be caused by an attacker via ...
CVE-2022-38496
LIEF commit 365a16a was discovered to contain a reachable assertion abort via the component BinaryStream.hpp...
