Siemens SIMATIC Controller Web Servers

1. EXECUTIVE SUMMARY CVSS v3 5.3 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Siemens Equipment: SIMATIC Controller Web Servers Vulnerability: Uncaught Exception 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to cause a...

ujson:json_differential_fuzzer: Uncaught exception in __strcat_chk

Detailed Report: https://oss-fuzz.com/testcase?key=5667659211079680 Project: ujson Fuzzing Engine: libFuzzer Fuzz Target: jsondifferentialfuzzer Job Type: libfuzzerubsanujson Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State: strcatchk strcatchk strcatchk Sanitizer:...

CVE-2020-8767

Uncaught exception in the IntelR 50GbE IP Core for IntelR Quartus Prime before version 20.2 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2020-0443

In LocaleList of LocaleList.java, there is a possible forced reboot due to an uncaught exception. This could lead to local denial of service requiring factory reset to restore with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-...

CVE-2020-0443

In LocaleList of LocaleList.java, there is a possible forced reboot due to an uncaught exception. This could lead to local denial of service requiring factory reset to restore with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-...

CVE-2020-0443

In LocaleList of LocaleList.java, there is a possible forced reboot due to an uncaught exception. This could lead to local denial of service requiring factory reset to restore with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-...

CVE-2020-0443: Improper Handling of Exceptional Conditions

In LocaleList of LocaleList.java, there is a possible forced reboot due to an uncaught exception. This could lead to local denial of service requiring factory reset to restore with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-...

IBM Cognos Analytics Denial of Service Vulnerability (CNVD-2020-57820)

IBM Cognos Analytics is a suite of business intelligence software from IBM USA that provides valuable information, secure data governance and reporting. A denial of service vulnerability exists in IBM Cognos Analytics version 11.0, 11.1. The vulnerability stems from a failure to catch an exceptio...

Google Android Code Issues Vulnerabilities

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. A security vulnerability exists in Android version 11. The vulnerability stems from an uncaught exception in the System UI that causes the system to crash. An attacker can use this vulnerability ...

CVE-2020-0318

In the System UI, there is a possible system crash due to an uncaught exception. This could lead to local permanent denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-33646131...

CVE-2020-0318

The CVE-2020-0318 entry affects Android 11 System UI, where an uncaught exception can crash the system, causing a local Denial of Service without requiring user interaction. The impact is a local, permanent DoS on affected devices, with no confidentiality/integrity concerns stated. Exploitation i...

PT-2020-11671

Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description The issue is related to a possible system crash due to an uncaught exception in the System UI. This could lead to a local permanent denial of service with no additional execution privileges needed. User...

CVE-2020-0318: Improper Handling of Exceptional Conditions

In the System UI, there is a possible system crash due to an uncaught exception. This could lead to local permanent denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-33646131...

CVE-2020-0332

In libstagefright, there is a possible dead loop due to an uncaught exception. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-124783982...

Design/Logic Flaw

In libstagefright, there is a possible dead loop due to an uncaught exception. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-124783982...

CVE-2020-0382

In RunInternal of dumpstate.cpp, there is a possible user consent bypass due to an uncaught exception. This could lead to local information disclosure of bug report data with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11...

CVE-2020-0332: Undefined Security Weakness

In libstagefright, there is a possible dead loop due to an uncaught exception. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-124783982...

PT-2020-11685

Name of the Vulnerable Software and Affected Versions Android versions prior to the fixed version Description The issue is related to a possible dead loop due to an uncaught exception in libstagefright. This could lead to a remote denial of service, with no additional execution privileges needed...

PT-2020-21590

Name of the Vulnerable Software and Affected Versions http-live-simulator versions prior to 1.0.8 Description The issue allows an attacker to send an HTTP request that crashes the server due to the package's failure to catch an exception, causing the Node process to crash and effectively shutting...

ASB-A-152944488

In RunInternal of dumpstate.cpp, there is a possible user consent bypass due to an uncaught exception. This could lead to local information disclosure of bug report data with System execution privileges needed. User interaction is not needed for exploitation...