CVE-2020-28949: Undefined Security Weakness

ArchiveTar through 1.4.10 has :// filename sanitization only to address phar attacks, and thus any other stream-wrapper attack such as file:// to overwrite files can still succeed...

Pear Archive_Tar Injection Vulnerability

Pear ArchiveTar is a Php-based software from the Pear PEAR team that can create and extract tarballs. A security vulnerability exists in ArchiveTar version 1.4.10 and earlier versions, which stems from the :// filename sanitization attack only for phar, so any other stream-wrapper file:// to...

BASETech GE-131 BT-1837836 Information Disclosure Vulnerability

The BASETech GE-131 BT-1837836 is a Wi-Fi IP CCTV camera. An information disclosure vulnerability exists in the BASETech GE-131 BT-1837836. An attacker can exploit the vulnerability to remotely access the video stream via an unrecorded user...

CVE-2020-27558

Use of an undocumented user in BASETech GE-131 BT-1837836 firmware 20180921 allows remote attackers to view the video stream...

CVE-2020-27558

Use of an undocumented user in BASETech GE-131 BT-1837836 firmware 20180921 allows remote attackers to view the video stream...

Design/Logic Flaw

Use of an undocumented user in BASETech GE-131 BT-1837836 firmware 20180921 allows remote attackers to view the video stream...

CVE-2020-27558

Use of an undocumented user in BASETech GE-131 BT-1837836 firmware 20180921 allows remote attackers to view the video stream...

CVE-2020-27558

CVE-2020-27558 concerns BASETech GE-131 BT-1837836 firmware 20180921. Multiple sources (NVD, CNVD, Red Hat, CVE listing) describe an information disclosure vulnerability where an undocumented user allows remote access to the video stream. The issue is a network-accessible flaw in the device’s aut...

Remote Code Execution (RCE)

XStream is vulnerable to remote code execution RCE. The processed stream at unmarshalling time contains type information to recreate the formerly written objects, and new instances are created based on these type information. The vulnerability allows an attacker to manipulate the processed input...

PT-2020-16706

Name of the Vulnerable Software and Affected Versions BASETech GE-131 BT-1837836 firmware version 20180921 Description The issue allows remote attackers to view the video stream due to the use of an undocumented user. Recommendations For BASETech GE-131 BT-1837836 firmware version 20180921, at th...

XStream Remote Code Execution Vulnerability (CNVD-2020-63975)

XStream is a lightweight , easy to use open source Java class library of the XStream team , it is mainly used to serialize objects into XML JSON or deserialize objects . A security vulnerability exists in XStream versions prior to 1.4.14 that stems from vulnerability to remote code execution...

CVE-2020-27558: Improper Authentication

Use of an undocumented user in BASETech GE-131 BT-1837836 firmware 20180921 allows remote attackers to view the video stream...

CVE-2020-26217

XStream before version 1.4.14 is vulnerable to Remote Code Execution.The vulnerability may allow a remote attacker to run arbitrary shell commands only by manipulating the processed input stream. Only users who rely on blocklists are affected. Anyone using XStream's Security Framework allowlist i...

CVE-2020-26217

XStream before version 1.4.14 is vulnerable to Remote Code Execution.The vulnerability may allow a remote attacker to run arbitrary shell commands only by manipulating the processed input stream. Only users who rely on blocklists are affected. Anyone using XStream's Security Framework allowlist i...

CVE-2020-26217 Remote Code Execution in XStream

XStream before version 1.4.14 is vulnerable to Remote Code Execution.The vulnerability may allow a remote attacker to run arbitrary shell commands only by manipulating the processed input stream. Only users who rely on blocklists are affected. Anyone using XStream's Security Framework allowlist i...

CVE-2020-26217: Improper Neutralization of Special Elements used in an OS Command

XStream before version 1.4.14 is vulnerable to Remote Code Execution.The vulnerability may allow a remote attacker to run arbitrary shell commands only by manipulating the processed input stream. Only users who rely on blocklists are affected. Anyone using XStream's Security Framework allowlist i...

envoy:h2_capture_persistent_fuzz_test: Heap-use-after-free in Envoy::Http::StreamCallbackHelper::runResetCallbacks

Detailed Report: https://oss-fuzz.com/testcase?key=5673532021014528 Project: envoy Fuzzing Engine: afl Fuzz Target: h2capturepersistentfuzztest Job Type: aflasanenvoy Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x603000303678 Crash State:...

arrow:arrow-ipc-stream-fuzz: Global-buffer-overflow in arrow::Status arrow::internal::ValidateArrayFullImpl::ValidateListLike<arrow::Li

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5151909853528064 Project: arrow Fuzzing Engine: libFuzzer Fuzz Target: arrow-ipc-stream-fuzz Job Type: libfuzzerasanarrow Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address:...

arrow:arrow-ipc-stream-fuzz: Heap-buffer-overflow in void arrow::internal::TransferBitmap<

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=4788296445853696 Project: arrow Fuzzing Engine: afl Fuzz Target: arrow-ipc-stream-fuzz Job Type: aflasanarrow Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x61e000001648...

CVE-2020-17045

Technical details for CVE-2020-17045 are not publicly provided in the supplied documents. No affected product/version/exploit information is included here. Monitor for updates from authoritative sources to obtain concrete details and remediation guidance.