DEBIAN-CVE-2019-20388

xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak...

UBUNTU-CVE-2019-20388

xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak...

arrow:arrow-ipc-stream-fuzz: Object-size in arrow::UnionType::UnionType

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5634103970103296 Project: arrow Fuzzing Engine: libFuzzer Fuzz Target: arrow-ipc-stream-fuzz Job Type: libfuzzerubsanarrow Platform Id: linux Crash Type: Object-size Crash Address: Crash State:...

arrow:arrow-ipc-stream-fuzz: Heap-buffer-overflow in arrow::Status arrow::internal::ValidateArrayVisitor::ValidateListArray<arrow::Li

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=6321355259904000 Project: arrow Fuzzing Engine: libFuzzer Fuzz Target: arrow-ipc-stream-fuzz Job Type: libfuzzerasanarrow Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

arrow:arrow-ipc-stream-fuzz: Global-buffer-overflow in arrow::Status arrow::VisitArrayInline<arrow::internal::ValidateArrayDataVisitor>

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5661776796712960 Project: arrow Fuzzing Engine: afl Fuzz Target: arrow-ipc-stream-fuzz Job Type: aflasanarrow Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address: 0x000002b252b8...

OpenJDK: Incorrect isBuiltinStreamHandler check causing URL normalization issues (Networking, 8228548)

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Networking. Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via...

OpenJDK: Incorrect isBuiltinStreamHandler check causing URL normalization issues (Networking, 8228548)

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Networking. Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via...

arrow:arrow-ipc-stream-fuzz: Crash in arrow::Array::IsNull

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5738372907925504 Project: arrow Fuzzing Engine: libFuzzer Fuzz Target: arrow-ipc-stream-fuzz Job Type: libfuzzerubsanarrow Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0001034c49e4 Cras...

arrow:arrow-ipc-stream-fuzz: Crash in arrow::Status arrow::VisitArrayInline<arrow::internal::ValidateArrayDataVisitor>

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5837681544396800 Project: arrow Fuzzing Engine: libFuzzer Fuzz Target: arrow-ipc-stream-fuzz Job Type: libfuzzerasanarrow Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x61e0003d1558 Crash...

arrow:arrow-ipc-stream-fuzz: Heap-use-after-free in arrow::internal::CountSetBits

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5713881930661888 Project: arrow Fuzzing Engine: afl Fuzz Target: arrow-ipc-stream-fuzz Job Type: aflasanarrow Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x62d001776978 Cra...

arrow:arrow-ipc-stream-fuzz: Heap-buffer-overflow in arrow::Status arrow::VisitArrayInline<arrow::internal::ValidateArrayDataVisitor>

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=4813040122068992 Project: arrow Fuzzing Engine: libFuzzer Fuzz Target: arrow-ipc-stream-fuzz Job Type: libfuzzerasanarrow Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

UBUNTU-CVE-2020-6631

An issue was discovered in GPAC version 0.8.0. There is a NULL pointer dereference in the function gfm2tsstreamprocesspmt in mediatools/m2tsmux.c...

GPAC Null Pointer Dereference Vulnerability (CNVD-2020-12682)

GPAC is a multimedia framework for rich media and distributed under the LGPL license. A null pointer dereference vulnerability exists in the gfm2tsstreamprocesspmt function in mediatools/m2tsmux.c in GPAC 0.8.0. An attacker could exploit this vulnerability to cause a denial of service...

openSUSE: Security Advisory for nghttp2 (openSUSE-SU-2019:2232-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2013-4985

Multiple Vivotek IP Cameras remote authentication bypass that could allow access to the video stream...

Authentication flaw

Multiple Vivotek IP Cameras remote authentication bypass that could allow access to the video stream...

CVE-2013-4985

Multiple Vivotek IP Cameras remote authentication bypass that could allow access to the video stream...

Oracle Linux 8 : git (ELSA-2019-4356)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-4356 advisory. - Remote code execution in recursive clones with nested submodules Resolves: CVE-2019-1387 Tenable has extracted the preceding description block direct...

Arbitrary Path Overwriting

Git is vulnerable to arbitrary path overwriting. It is possible via export-marks in-stream command feature...

DEBIAN-CVE-2019-5152

An exploitable information disclosure vulnerability exists in the network packet handling functionality of Shadowsocks-libev 3.3.2. When utilizing a Stream Cipher, a specially crafted set of network packets can cause an outbound connection from the server, resulting in information disclosure. An...