5634 matches found
CVE-2020-18683: Improper Input Validation
Floodlight through 1.2 has poor input validation in checkFlow in StaticFlowEntryPusherResource.java because of undefined fields mishandling...
CVE-2021-41558: Undefined Security Weakness
The setuser extension module before 3.0.0 for PostgreSQL allows ProcessUtilityhook bypass via setconfig...
CVE-2021-23243: Undefined Security Weakness
In Oppo's battery application, the third-party SDK provides the function of loading a third-party Provider, which can be used...
CVE-2021-40329: Undefined Security Weakness
The Authentication API in Ping Identity PingFederate before 10.3 mishandles certain aspects of external password management...
EulerOS 2.0 SP5 : OpenEXR (EulerOS-SA-2021-2514)
According to the versions of the OpenEXR package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw found in function dataWindowForTile of IlmImf/ImfTiledMisc.cpp. An attacker who is able to submit a crafted file to be processed by OpenE...
Aliased mutable references from `tls_rand` & `TlsWyRand`
TlsWyRand's implementation of Deref unconditionally dereferences a raw pointer, and returns multiple mutable references to the same object, which is undefined behavior...
Mozilla Rust Command Injection Vulnerability (CNVD-2021-85286)
Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A command injection vulnerability exists in Mozilla Rust's schets multiqueue, which can be exploited by attackers to cause data contention errors or other undefined behavior...
Mozilla Rust Command Injection Vulnerability (CNVD-2021-78750)
Rust is a general-purpose, compiled programming language from the Mozilla Foundation.Mozilla Rust versions prior to 0.3.4 are vulnerable to command injection, which stems from the kekbit crate in Rust, for ShmWriter , Send is implemented without H: Send, and an attacker could exploit this...
Mozilla Rust Memory Corruption Vulnerability (CNVD-2021-78745)
Rust is a general-purpose, compiled programming language from the Mozilla Foundation. Mozilla Rust suffers from a memory corruption vulnerability that can be exploited by attackers to cause undefined behavior, such as data contention...
Mozilla Rust Command Injection Vulnerability (CNVD-2021-78744)
Rust is a general-purpose, compiled programming language from the Mozilla Foundation. Mozilla Rust is vulnerable to a command injection vulnerability that could be exploited by attackers to trigger undefined behavior and memory corruption...
PT-2021-24279
Name of the Vulnerable Software and Affected Versions: nanorand crate versions prior to 0.6.1 Description: The issue arises from the TlsWyRand implementation of Deref, which unconditionally dereferences a raw pointer and returns multiple mutable references to the same object. This behavior is...
CVE-2021-41382: Undefined Security Weakness
Plastic SCM before 10.0.16.5622 mishandles the WebAdmin server management interface...
CVE-2021-41326: Undefined Security Weakness
In MISP before 2.4.148, app/Lib/Export/OpendataExport.php mishandles parameter data that is used in a shellexec call...
Missing check for duplicate token in addToken
Handle 0xRajeev Vulnerability details Impact addToken does not check for token being added a duplicate of what was already added. If a duplicate token is added, removeToken only removes the first matching token and the later duplicates still remain. With the vaulttoken deleted, this may lead to...
wasm3:fuzzer: Crash with empty stacktrace
Detailed Report: https://oss-fuzz.com/testcase?key=4817025503985664 Project: wasm3 Fuzzing Engine: libFuzzer Fuzz Target: fuzzer Job Type: libfuzzerubsanwasm3 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000002f20138 Crash State: NULL Sanitizer: undefined UBSAN Recommended Securit...
CVE-2021-30690: Undefined Security Weakness
Multiple issues in apache were addressed by updating apache to version 2.4.46. This issue is fixed in Security Update 2021-004 Mojave. Multiple issues in apache...
EulerOS 2.0 SP5 : ImageMagick (EulerOS-SA-2021-2334)
According to the versions of the ImageMagick packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in ImageMagick in versions before 7.0.11 and before 6.9.12, where a division by zero in WaveImage of...
CVE-2021-40540: Undefined Security Weakness
ulfiusurilogger in Ulfius HTTP Framework before 2.7.4 omits coninfo initialization and a coninfo-request NULL check for certain malformed HTTP requests...