hsqldb:SqlStatementFuzzer: Security exception in java.base/sun.nio.cs.CESU_8.newEncoder

Detailed Report: https://oss-fuzz.com/testcase?key=4742737617616896 Project: hsqldb Fuzzing Engine: libFuzzer Fuzz Target: SqlStatementFuzzer Job Type: libfuzzerasanhsqldb Platform Id: linux Crash Type: Security exception Crash Address: Crash State: java.base/sun.nio.cs.CESU8.newEncoder...

PT-2022-37300 · Unknown · Javaparser

Name of the Vulnerable Software and Affected Versions: JavaParser affected versions not specified Description: The issue is related to a security exception in the JavaParser library. The crash occurs in the com.github.javaparser.ast.expr.FieldAccessExpr.accept and...

SUSE-SU-2020:2807-1 Security update for aspell

This update for aspell fixes the following security issue: - CVE-2019-20433: Fixed a buffer over-read when processing strings ending with a single '\0' byte with ucs-2 and ucs-4 encoding bsc1161982...

The ASN1_STRING_print_ex function in OpenSSL before 0.9.8k allows remote attackers to cause a denial of service (invalid memory access and application crash) via vectors that trigger printing of a (1) BMPString or (2) UniversalString with an invalid encoded length.

...

libIEC61850 buffer overflow vulnerability (CNVD-2019-09613)

libIEC61850 is an open source GPLv3 implementation of the IEC 61850 client and server libraries. A heap buffer overflow vulnerability exists in BerEncoderencodeOctetString in mms/asn1/berencoder.c in libIEC61850 1.3, which can be exploited by an attacker to execute arbitrary code or cause a denia...

Automattic: XSS at www.woothemes.com

This XSS vulnerability can be used against IE browsers. There is an XSS filter in modern IE browsers, so to reproduce we should turn XSS filter off http://answers.microsoft.com/en-us/ie/forum/ie9-windows7/how-do-i-turn-off-cross-site-scripting-i-can-no/f3058b73-4956-e011-8dfc-68b599b31bf5?auth=1,...

CVE-2011-1050

Unspecified vulnerability in Hex-Rays IDA Pro 5.7 and 6.0 has unknown impact and attack vectors related to "converson of string encodings" and "inconsistencies in the handling of UTF8 sequences by the user interface."...

Design/Logic Flaw

Unspecified vulnerability in Hex-Rays IDA Pro 5.7 and 6.0 has unknown impact and attack vectors related to "converson of string encodings" and "inconsistencies in the handling of UTF8 sequences by the user interface."...

CVE-2011-1050: Undefined Security Weakness

Unspecified vulnerability in Hex-Rays IDA Pro 5.7 and 6.0 has unknown impact and attack vectors related to "converson of string encodings" and "inconsistencies in the handling of UTF8 sequences by the user interface."...

PT-2011-2836

Name of the Vulnerable Software and Affected Versions Hex-Rays IDA Pro versions 5.7 through 6.0 Description The issue is related to the conversion of string encodings and inconsistencies in the handling of UTF8 sequences by the user interface, but the impact and attack vectors are unknown...