10373 matches found
OSV-2020-1246 Stack-buffer-overflow in void apply_sao_internal<unsigned short>
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13643 Crash type: Stack-buffer-overflow READ 4 Crash state: void applysaointernal void applysao threadtasksao::work...
OSV-2020-1185 Global-buffer-overflow in kencodingprober::nsCodingStateMachine::NextState
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12919 Crash type: Global-buffer-overflow READ 4 Crash state: kencodingprober::nsCodingStateMachine::NextState kencodingprober::nsEscCharSetProber::HandleData kencodingprober::nsUniversalDetector::HandleData...
OSV-2020-1171 Heap-use-after-free in JS_ReadObjectRec
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21532 Crash type: Heap-use-after-free READ 4 Crash state: JSReadObjectRec JSReadObject fuzzcompile.c...
[SECURITY] Fedora 32 Update: mingw-LibRaw-0.19.5-4.fc32
MinGW Windows LibRaw library...
QEMU 4.x < 5.0.0 Authentication Bypass Vulnerability
QEMU is prone to an authentication bypass vulnerability. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you...
Security Bulletin: Libxml2 vulnerabilities affect IBM SmartCloud Entry (CVE-2015-1819)
Summary IBM SmartCloud Entry is vulnerable to several libxml2 vulnerabilities. Remote attackers can exploit them to consume all available memory resources. Vulnerability Details CVEID: CVE-2015-1819 DESCRIPTION: Libxml is vulnerable to a denial of service, caused by an XML External Entity Injecti...
CVE-2020-15117 Denial of Service in Synergy
In Synergy before version 1.12.0, a Synergy server can be crashed by receiving a kMsgHelloBack packet with a client name length set to 0xffffffff 4294967295 if the servers memory is less than 4 GB. It was verified that this issue does not cause a crash through the exception handler if the availab...
Apple Security Update: watchOS 5.3.8
Apple recommends to install security update watchOS 5.3.8 on devices Apple Watch Series 1, 2, 3, and 4...
Apple Security Update: watchOS 5.3.8
Apple recommends to install security update watchOS 5.3.8 on devices Apple Watch Series 1, 2, 3, and 4...
OSV-2020-867 Heap-buffer-overflow in icu_64::CollationIterator::appendCEsFromCE32
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15613 Crash type: Heap-buffer-overflow READ 4 Crash state: icu64::CollationIterator::appendCEsFromCE32 icu64::DataBuilderCollationIterator::fetchCEs icu64::CollationDataBuilder::getCEs...
OSV-2020-789 Heap-use-after-free in llvm_ks::X86Operand::getToken
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22850 Crash type: Heap-use-after-free READ 4 Crash state: llvmks::X86Operand::getToken X86AsmParser::MatchAndEmitATTInstruction X86AsmParser::MatchAndEmitInstruction...
OSV-2020-772 Heap-buffer-overflow in __libcpp_strstr
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23601 Crash type: Heap-buffer-overflow READ 4 Crash state: libcppstrstr strstr pcpp::SipRequestFirstLine::parseVersion...
Sony Playstation 4 (PS4) < 7.02 / FreeBSD 9 / FreeBSD 12 - Kernel Local Privilege Escalation
Sony Playstation 4 PS4 include include include include include include include define KERNEL include undef KERNEL define WANTFILE include include include include include define WANTSOCKET include include define WANTINPCB include include include // define FBSD12 define ELFMAGIC 0x464c457f define...
Fedora 31 : 1:xpdf (2020-de27bb80af)
Fix CVE-2019-12360. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network Security, In...
flacheres.fr Cross Site Scripting vulnerability OBB-1215865
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
smileylicense.com Cross Site Scripting vulnerability OBB-1215845
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
ping.taccon.com Cross Site Scripting vulnerability OBB-1215804
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
hotelmarts.com Cross Site Scripting vulnerability OBB-1215747
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
snagnazionale.it Cross Site Scripting vulnerability OBB-1215647
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
OSV-2020-699 Heap-buffer-overflow in ihevcd_process
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18406 Crash type: Heap-buffer-overflow READ 4 Crash state: ihevcdprocess ihevcdprocessthread startthread...