11645 matches found
CVE-2020-9395: Out-of-bounds Write
An issue was discovered on Realtek RTL8195AM, RTL8711AM, RTL8711AF, and RTL8710AF devices before 2.0.6. A stack-based buffer overflow exists in the client code that takes care of WPA2's 4-way-handshake via a malformed EAPOL-Key packet with a long keydata buffer...
Fedora 31 : 1:xpdf (2020-de27bb80af)
Fix CVE-2019-12360. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network Security, In...
flacheres.fr Cross Site Scripting vulnerability OBB-1215865
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
smileylicense.com Cross Site Scripting vulnerability OBB-1215845
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
ping.taccon.com Cross Site Scripting vulnerability OBB-1215804
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
hotelmarts.com Cross Site Scripting vulnerability OBB-1215747
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
snagnazionale.it Cross Site Scripting vulnerability OBB-1215647
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
OSV-2020-699 Heap-buffer-overflow in ihevcd_process
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18406 Crash type: Heap-buffer-overflow READ 4 Crash state: ihevcdprocess ihevcdprocessthread startthread...
OSV-2020-677 Heap-buffer-overflow in load
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15007 Crash type: Heap-buffer-overflow READ 4 Crash state: load rbinobjectnew rbinfilenewfrombuffer...
OSV-2020-674 Heap-buffer-overflow in ihevcd_mv_merge
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17196 Crash type: Heap-buffer-overflow READ 4 Crash state: ihevcdmvmerge ihevcdgetmvctb ihevcdparseslicedata...
OSV-2020-504 Global-buffer-overflow in lwan_parse_rfc_time
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14297 Crash type: Global-buffer-overflow READ 4 Crash state: lwanparserfctime parseifmodifiedsince fuzzparsehttprequest...
PT-2020-22273
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type identified as Stack-use-after-return READ 4. The crash state involves the ihievcd process thread and clone functions. ...
PT-2020-22402
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description A heap-use-after-free READ 4 crash has been reported. The crash involves the proc plaintext, do proc packets, and proc signature packets functions...
PT-2020-22485
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 4 crash has been reported. The crash occurs in the following functions: ihevcd process, ihevcd process thread, start thread. No...
PT-2020-22432
Name of the Vulnerable Software and Affected Versions LZ4 affected versions not specified Description The issue is related to a heap buffer overflow, specifically a WRITE 4 crash type. Technical details about the crash state indicate involvement of the LZ4 write32, LZ4 compress fast extState, and...
OSV-2020-300 Heap-buffer-overflow in sas_read4
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12978 Crash type: Heap-buffer-overflow READ 4 Crash state: sasread4 sas7bdatparsepagepass2 sas7bdatparseallpagespass2...
OSV-2020-257 Heap-use-after-free in ihevcd_jobq_lock
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17553 Crash type: Heap-use-after-free READ 4 Crash state: ihevcdjobqlock ihevcdjobqyield ihevcdjobqdequeue...
PT-2020-22223
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 4 crash has been reported. The crash occurs in the following functions: ih264d decode slice thread and ih264d decode picture...
marisha39.com Cross Site Scripting vulnerability OBB-1209236
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
leptonica:dewarp_fuzzer: Heap-buffer-overflow in rasteropGeneralLow
Detailed Report: https://oss-fuzz.com/testcase?key=5081162166042624 Project: leptonica Fuzzing Engine: afl Fuzz Target: dewarpfuzzer Job Type: aflasanleptonica Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x6020000002c0 Crash State: rasteropGeneralLow rasteropLow...