AVEVA System Platform (Update A)

1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Exploitable from adjacent network/low attack complexity Vendor: AVEVA Software, LLC Equipment: System Platform Vulnerabilities: Missing Authentication for Critical Function, Uncaught Exception, Path Traversal, Origin Validation Error, Improper...

CVE-2021-0478

In updateDrawable of StatusBarIconView.java, there is a possible permission bypass due to an uncaught exception. This could lead to local escalation of privilege by running foreground services without notifying the user, with User execution privileges needed. User interaction is not needed for...

OSV-2021-882 Uncaught exception

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35392 Crash type: Uncaught exception Crash state: NULL...

CVE-2021-32694

Nextcloud Android app is the Android client for Nextcloud. In versions prior to 3.15.1, a malicious application on the same device is possible to crash the Nextcloud Android Client due to an uncaught exception. The vulnerability is patched in version 3.15.1...

PT-2021-19861

Name of the Vulnerable Software and Affected Versions Nextcloud Android app versions prior to 3.15.1 Description The issue allows a malicious application on the same device to crash the Nextcloud Android Client due to an uncaught exception. Recommendations For versions prior to 3.15.1, update to...

CVE-2021-32694: Uncaught Exception

Nextcloud Android app is the Android client for Nextcloud. In versions prior to 3.15.1, a malicious application on the same device is possible to crash the Nextcloud Android Client due to an uncaught exception. The vulnerability is patched in version 3.15.1...

OSV-2021-812 Uncaught exception in com.esotericsoftware.kryo.serializers.FieldSerializer.read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34733 Crash type: Uncaught exception Crash state: com.esotericsoftware.kryo.serializers.FieldSerializer.read com.esotericsoftware.kryo.Kryo.readObject DeserializeStringFuzzer.fuzzerTestOneInput...

GHSA-8RF5-92JH-3VC9 Uncaught Exception leading to Denial of Service in json-sanitizer

OWASP json-sanitizer before 1.2.2 can output invalid JSON or throw an undeclared exception for crafted input. This may lead to denial of service if the application is not prepared to handle these situations...

Uncaught Exception

Overview std/math/big is a Go standard library package std/math/big Affected versions of this package are vulnerable to Uncaught Exception. Go Vulnerability Report: A number of math/big.Int methods can panic when provided large inputs due to a flawed division method. Remediation Upgrade...

Denial of Service (DoS) in restify-paginate

The restify-paginate package 0.0.5 for Node.js allows remote attackers to cause a Denial-of-Service by omitting the HTTP Host header. A Restify-based web service would crash with an uncaught exception...

GHSA-QR9H-VR5P-PWWX Denial of Service (DoS) in restify-paginate

The restify-paginate package 0.0.5 for Node.js allows remote attackers to cause a Denial-of-Service by omitting the HTTP Host header. A Restify-based web service would crash with an uncaught exception...

OSV-2021-570 Uncaught exception in com.fasterxml.jackson.databind.deser.std.BaseNodeDeserializer.deserializeObject

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32554 Crash type: Uncaught exception Crash state: com.fasterxml.jackson.databind.deser.std.BaseNodeDeserializer.deserializeObject java.base/java.lang.invoke.MethodHandleNatives.refKindIsField...

OSV-2021-560 Uncaught exception in java.base/java.lang.ClassLoader.defineClass0

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32439 Crash type: Uncaught exception Crash state: java.base/java.lang.ClassLoader.defineClass0 java.base/java.lang.System$2.defineClass java.base/java.lang.invoke.MethodHandles$Lookup$ClassDefiner.defineClass...

OSV-2021-559 Uncaught exception in java.base/java.nio.CharBuffer.wrap

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32405 Crash type: Uncaught exception Crash state: java.base/java.nio.CharBuffer.wrap java.base/sun.nio.cs.StreamDecoder.implRead java.base/sun.nio.cs.StreamDecoder.read...

CVE-2020-27543

The restify-paginate package 0.0.5 for Node.js allows remote attackers to cause a Denial-of-Service by omitting the HTTP Host header. A Restify-based web service would crash with an uncaught exception...

CVE-2020-27543

The restify-paginate package 0.0.5 for Node.js allows remote attackers to cause a Denial-of-Service by omitting the HTTP Host header. A Restify-based web service would crash with an uncaught exception...

Design/Logic Flaw

The restify-paginate package 0.0.5 for Node.js allows remote attackers to cause a Denial-of-Service by omitting the HTTP Host header. A Restify-based web service would crash with an uncaught exception...

CVE-2020-27543: Improper Handling of Exceptional Conditions

The restify-paginate package 0.0.5 for Node.js allows remote attackers to cause a Denial-of-Service by omitting the HTTP Host header. A Restify-based web service would crash with an uncaught exception...

CVE-2021-27568

An issue was discovered in netplex json-smart-v1 through 2015-10-23 and json-smart-v2 through 2.4. An exception is thrown from a function, but it is not caught, as demonstrated by NumberFormatException. When it is not caught, it may cause programs using the library to crash or expose sensitive...

CVE-2021-27568

An issue was discovered in netplex json-smart-v1 through 2015-10-23 and json-smart-v2 through 2.4. An exception is thrown from a function, but it is not caught, as demonstrated by NumberFormatException. When it is not caught, it may cause programs using the library to crash or expose sensitive...