Team IT Security (TSEC) Nachrichtenportal Logo

🕵️ GitHub Security Lab: [CATENACYBER]: [CPP] CWE-476 Null Pointer Dereference : Another query to either missing or redundant NULL check


Nachrichtenbereich: 🕵️ Sicherheitslücken
🔗 Quelle: vulners.com


image
This bug was reported directly to GitHub Security... ...

Sharing is caring on Social Media

Reddit
Telegram
LinkedIn
Xing
Twitter
Whatsapp
Facebook
Flipboard

🕵️ GitHub Security Lab: ihsinme: CPP add query for: CPP Add query for CWE-20 Improper Input Validation


📈 77.27 Punkte
🕵️ Sicherheitslücken

🕵️ GitHub Security Lab: [CPP]: Add query for CWE-754: Improper Check for Unusual or Exceptional Conditions when using functions scanf


📈 63.61 Punkte
🕵️ Sicherheitslücken

🕵️ GitHub Security Lab: ihsinme: CPP Add query for CWE-14 compiler removal of code to clear buffers.


📈 56.79 Punkte
🕵️ Sicherheitslücken

🕵️ GitHub Security Lab: [CPP]: Add query for CWE-297: Improper Validation of Certificate with Host Mismatch


📈 56.79 Punkte
🕵️ Sicherheitslücken

🕵️ GitHub Security Lab: CPP: Add query for CWE-243 Creation of chroot Jail Without Changing Working Directory


📈 56.79 Punkte
🕵️ Sicherheitslücken

🕵️ GitHub Security Lab: [CPP]: Add query for CWE-190: Integer Overflow or Wraparound when using transform after operation


📈 56.79 Punkte
🕵️ Sicherheitslücken

🕵️ GitHub Security Lab: ihsinme: CPP Add query for CWE-691 Insufficient Control Flow Management When Using Bit Operations


📈 56.79 Punkte
🕵️ Sicherheitslücken

🕵️ GitHub Security Lab: ihsinme: CPP Add query for CWE-691 Insufficient Control Flow Management After Refactoring The Code


📈 56.79 Punkte
🕵️ Sicherheitslücken

🕵️ GitHub Security Lab: ihsinme: CPP Add query for CWE-570 detect and handle memory allocation errors.


📈 56.79 Punkte
🕵️ Sicherheitslücken

🕵️ GitHub Security Lab: ihsinme: CPP add query for CWE-788 Access of memory location after the end of a buffer using strlen.


📈 56.79 Punkte
🕵️ Sicherheitslücken

🕵️ GitHub Security Lab: ihsinme: CPP add query for CWE-788 Access of memory location after the end of a buffer using strncat.


📈 56.79 Punkte
🕵️ Sicherheitslücken

🕵️ GitHub Security Lab: ihsinme: CPP Add query for CWE-401 memory leak on unsuccessful call to realloc function


📈 56.79 Punkte
🕵️ Sicherheitslücken

🕵️ GitHub Security Lab: [javascript] CWE-020: CodeQL query to detect missing origin validation in cross-origin communication via postMessage


📈 56.51 Punkte
🕵️ Sicherheitslücken

🕵️ GitHub Security Lab: [Java] CWE-1004: Query to check sensitive cookies without the HttpOnly flag set


📈 53.91 Punkte
🕵️ Sicherheitslücken

🕵️ Open-Xchange: Null dereference or redundant null check in `mail_crypt_load_global_private_key` for plugin mail-crypt


📈 52.84 Punkte
🕵️ Sicherheitslücken

🕵️ Open-Xchange: null dereference in `sieve_address_do_validate` (or redundant null check)


📈 52.84 Punkte
🕵️ Sicherheitslücken

🕵️ GitHub Security Lab: [javascript] CWE-117: CodeQL query to detect Log Injection


📈 47.1 Punkte
🕵️ Sicherheitslücken

🕵️ GitHub Security Lab: Go/CWE-643: XPath Injection Query in Go


📈 47.1 Punkte
🕵️ Sicherheitslücken

🕵️ GitHub Security Lab: CodeQL query for finding LDAP Injection (CWE-90) vulnerabilities in Java


📈 47.1 Punkte
🕵️ Sicherheitslücken

🕵️ GitHub Security Lab: [Java]: CWE-625 - Query to detect regex dot bypass


📈 47.1 Punkte
🕵️ Sicherheitslücken

🕵️ GitHub Security Lab: [Java]: CWE-321 - Query to detect hardcoded JWT secret keys


📈 47.1 Punkte
🕵️ Sicherheitslücken

🕵️ GitHub Security Lab: [Java] CWE-094: Query to detect Groovy Code Injections


📈 47.1 Punkte
🕵️ Sicherheitslücken

🕵️ GitHub Security Lab: [Java] CWE-759: Query to detect password hash without a salt


📈 47.1 Punkte
🕵️ Sicherheitslücken

🕵️ GitHub Security Lab: [Java] CWE-312: Query to detect cleartext storage of sensitive information using Android SharedPreferences


📈 47.1 Punkte
🕵️ Sicherheitslücken

🕵️ GitHub Security Lab: [Java] CWE-598: Use of GET Request Method with Sensitive Query Strings


📈 47.1 Punkte
🕵️ Sicherheitslücken

🕵️ GitHub Security Lab: [Java] CWE-489: Query to detect main() method in Java EE applications


📈 47.1 Punkte
🕵️ Sicherheitslücken

🕵️ GitHub Security Lab: [Java] CWE-326: Query to detect weak encryption with an insufficient key size


📈 47.1 Punkte
🕵️ Sicherheitslücken

🕵️ GitHub Security Lab: [Java] CWE-555: Query to detect password in Java EE configuration files


📈 47.1 Punkte
🕵️ Sicherheitslücken

🕵️ GitHub Security Lab: [javascript] CWE-614: CodeQL query to detect if cookies are sent without the flag secure being set


📈 47.1 Punkte
🕵️ Sicherheitslücken

🕵️ GitHub Security Lab: [Java] CWE-755: Query to detect Local Android DoS caused by NFE


📈 47.1 Punkte
🕵️ Sicherheitslücken

🕵️ Open-Xchange: Missing (or redundant) null check in `dcrypt_openssl_sign`


📈 46.05 Punkte
🕵️ Sicherheitslücken

🕵️ GitHub Security Lab: CPP: CWE-191 into experimental this reveals a dangerous comparison


📈 46 Punkte
🕵️ Sicherheitslücken

🕵️ GitHub Security Lab: CPP: Missing/incomplete TLS server certificate hostname validation


📈 38.23 Punkte
🕵️ Sicherheitslücken

🕵️ GitHub Security Lab: [Java] CWE-327: Add more broken crypto algorithms


📈 36.31 Punkte
🕵️ Sicherheitslücken

🕵️ GitHub Security Lab: Java/CWE-036: Calling openStream on URLs created from remote source can lead to file disclosure


📈 36.31 Punkte
🕵️ Sicherheitslücken

matomo
•