grok:grk_decompress_fuzzer: Container-overflow in grk::T2Decode::read_packet_header

Detailed Report: https://oss-fuzz.com/testcase?key=5136412048097280 Project: grok Fuzzing Engine: honggfuzz Fuzz Target: grkdecompressfuzzer Job Type: honggfuzzasangrok Platform Id: linux Crash Type: Container-overflow READ 8 Crash Address: 0x61500007a760 Crash State:...

dctech.com Cross Site Scripting vulnerability OBB-1239605

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

envoy:xds_fuzz_test: Heap-use-after-free in std::__1::__list_iterator<std::__1::unique_ptr<Envoy::Server::ListenerImpl, std:

Project: https://github.com/envoyproxy/envoy.git Detailed Report: https://oss-fuzz.com/testcase?key=5715241737125888 Project: envoy Fuzzing Engine: libFuzzer Fuzz Target: xdsfuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x603000f1b6...

cvsmed.org Cross Site Scripting vulnerability OBB-1236128

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

writing.com Cross Site Scripting vulnerability OBB-1235526

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

unvclx.sourceforge.net Cross Site Scripting vulnerability OBB-1224941

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

ossipeehabitat.org Cross Site Scripting vulnerability OBB-1224598

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

kronekodow.com Cross Site Scripting vulnerability OBB-1222561

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

skia:skruntimeeffect: Heap-use-after-free in SkSL::StringFragment::operator==

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=6254144880115712 Project: skia Fuzzing Engine: libFuzzer Fuzz Target: skruntimeeffect Job Type: libfuzzerasanskia Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address:...

draco:draco_pc_decoder_fuzzer: Heap-use-after-free in void draco::Metadata::AddEntry<std::__1::vector<unsigned char, std::__1::allocat

Detailed Report: https://oss-fuzz.com/testcase?key=5111868163883008 Project: draco Fuzzing Engine: afl Fuzz Target: dracopcdecoderfuzzer Job Type: aflasandraco Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x6040000000d8 Crash State: void...

qt:qtbase_gui_image_qimage_loadfromdata: Heap-buffer-overflow in read_xpm_body

Project: git://code.qt.io/qt/qt5.git Detailed Report: https://oss-fuzz.com/testcase?key=5795358152851456 Project: qt Fuzzing Engine: libFuzzer Fuzz Target: qtbaseguiimageqimageloadfromdata Job Type: libfuzzerasanqt Platform Id: linux Crash Type: Heap-buffer-overflow READ 7 Crash Address:...

sdds.cz Cross Site Scripting vulnerability OBB-1217704

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

ghostscript:gstoraster_fuzzer: Use-of-uninitialized-value in s_A85D_process

Detailed Report: https://oss-fuzz.com/testcase?key=5917456288448512 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzermsanghostscript Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: sA85Dprocess gsscantoken interp...

belikopi.com Cross Site Scripting vulnerability OBB-1209139

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

libxml2:html: Heap-use-after-free in xmlParserPrintFileContextInternal

Project: https://gitlab.gnome.org/GNOME/libxml2.git Detailed Report: https://oss-fuzz.com/testcase?key=4858748979118080 Project: libxml2 Fuzzing Engine: honggfuzz Fuzz Target: html Job Type: honggfuzzasanlibxml2 Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x6210000079...

binutils:fuzz_readelf: Heap-use-after-free in make_qualified_name

Detailed Report: https://oss-fuzz.com/testcase?key=5750482235817984 Project: binutils Fuzzing Engine: honggfuzz Fuzz Target: fuzzreadelf Job Type: honggfuzzasanbinutils Platform Id: linux Crash Type: Heap-use-after-free READ 2 Crash Address: 0x6020000000b0 Crash State: makequalifiedname...

gdal:lvbag_fuzzer: Heap-buffer-overflow in OGR_RawField_IsUnset

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=5186645136769024 Project: gdal Fuzzing Engine: honggfuzz Fuzz Target: lvbagfuzzer Job Type: honggfuzzasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x6020000038b0 Cras...

jamanetwork.com Open Redirect vulnerability OBB-1204132

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

imagemagick:ping_tiff_fuzzer: Stack-buffer-overflow in _TIFFVGetField

Detailed Report: https://oss-fuzz.com/testcase?key=5456669504176128 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingtifffuzzer Job Type: libfuzzerasani386imagemagick Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 4 Crash Address: 0xffa45c90 Crash State: TIFFVGetField...

stpatrickrocor.com Cross Site Scripting vulnerability OBB-1202696

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...