16316 matches found
GHSA-87R5-MP6G-5W5J jsonpath has Arbitrary Code Injection via Unsafe Evaluation of JSON Path Expressions
Impact Arbitrary Code Injection Remote Code Execution & XSS: A critical security vulnerability affects all versions of the jsonpath package. The library relies on the static-eval module to evaluate JSON Path expressions but fails to properly sanitize or sandbox the input. This allows an attacker ...
CVE-2025-15564
A vulnerability has been found in Mapnik up to 4.2.0. This vulnerability affects the function mapnik::detail::mod::operator of the file src/value.cpp. The manipulation leads to divide by zero. The attack needs to be performed locally. The exploit has been disclosed to the public and may be used...
trafficserver:fuzz_http: Use-of-uninitialized-value in hdrtoken_hash
Project: https://github.com/apache/trafficserver.git Detailed Report: https://oss-fuzz.com/testcase?key=4669620266270720 Project: trafficserver Fuzzing Engine: libFuzzer Fuzz Target: fuzzhttp Job Type: libfuzzermsantrafficserver Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...
VulnCheck KEV: CVE-2009-2267
VMware Workstation 6.5.x before 6.5.3 build 185404, VMware Player 2.5.x before 2.5.3 build 185404, VMware ACE 2.5.x before 2.5.3 build 185404, VMware Server 1.x before 1.0.10 build 203137 and 2.x before 2.0.2 build 203138, VMware Fusion 2.x before 2.0.6 build 196839, VMware ESXi 3.5 and 4.0, and...
NILFS2 File System Heap Buffer Overflow DoS
The vulnerability of the nilfsbmaplookupatlevel function in the fs/nilfs2/bmap.c file of the NILFS2 file system in the Linux operating system is related to incorrect checking of the returned value from this function. Exploiting this vulnerability could allow an attacker to cause a service failure...
ROS-20260209-73-0016
Vulnerability in binutils related to an unchecked return value. Exploitation of the vulnerability could allow an attacker to cause a denial of service...
CVE-2026-1675
The Advanced Country Blocker plugin for WordPress is vulnerable to Authorization Bypass in all versions up to, and including, 2.3.1 due to the use of a predictable default value for the secret bypass key created during installation without requiring users to change it. This makes it possible for...
OSV-2026-209 Use-of-uninitialized-value in ntrip_parse_url
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=482281265 Crash type: Use-of-uninitialized-value Crash state: ntripparseurl FuzzClient.c...
NFS DoS
The vulnerability of the nfsdnetinit function in the fs/nfsd/nfsctl.c module, which supports the NFS network file system in Linux kernels, is related to the lack of checking for the return value. Exploiting this vulnerability could allow an attacker to cause a service failure...
PT-2026-20361
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=482281265 Crash type: Use-of-uninitialized-value Crash state: ntrip parse url FuzzClient.c...
CVE-2025-15564
Mapnik < 4.2.0 is affected by CVE-2025-15564 in mapnik::detail::mod::operator (src/value.cpp), causing a divide-by-zero. The flaw requires local access and has publicly disclosed exploit information; multiple feeds (NVD, Red Hat, Ubuntu, OSV, Debian, etc.) corroborate. The vulnerability impact...
CVE-2025-15564 Mapnik value.cpp operator divide by zero
A vulnerability has been found in Mapnik up to 4.2.0. This vulnerability affects the function mapnik::detail::mod::operator of the file src/value.cpp. The manipulation leads to divide by zero. The attack needs to be performed locally. The exploit has been disclosed to the public and may be used...
CVE-2025-15564 Mapnik value.cpp operator divide by zero
A vulnerability has been found in Mapnik up to 4.2.0. This vulnerability affects the function mapnik::detail::mod::operator of the file src/value.cpp. The manipulation leads to divide by zero. The attack needs to be performed locally. The exploit has been disclosed to the public and may be used...
PT-2026-6805
Name of the Vulnerable Software and Affected Versions OpenProject versions prior to 16.6.7 OpenProject versions prior to 17.0.3 Description OpenProject is a web-based project management software. A flaw exists in the repository changes endpoint '/projects/:project id/repository/changes' when...
imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in decoder_context::construct_reference_picture_lists
Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=6717528184520704 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value...
cmake:cmArchiveExtractFuzzer: Use-of-uninitialized-value in archive_be16dec
Project: https://gitlab.kitware.com/cmake/cmake.git Detailed Report: https://oss-fuzz.com/testcase?key=5916374378807296 Project: cmake Fuzzing Engine: libFuzzer Fuzz Target: cmArchiveExtractFuzzer Job Type: libfuzzermsancmake Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address...
OSV-2026-195 Use-of-uninitialized-value in vcardstructured_free
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=481458325 Crash type: Use-of-uninitialized-value Crash state: vcardstructuredfree vcardparameterfree vcardpropertyfree...
GPIO controller driver Pinmux Function Use-After-Free
The vulnerability of the pinmuxfuncnametoselector function in the drivers/pinctrl/pinmux.c file, a driver for LINUX operating system GPIO controllers, is related to the lack of checking the return value. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
PT-2026-22160
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=481458325 Crash type: Use-of-uninitialized-value Crash state: vcardstructured free vcardparameter free vcardproperty free...
ROS-20260205-73-0029
A vulnerability in the x86/mm component of the Linux operating system kernel involves an unchecked return value. Exploitation of the vulnerability could allow an attacker to cause a denial of service...