xvid:fuzzer-decoder: Use-of-uninitialized-value in BitstreamReadHeaders

Detailed Report: https://oss-fuzz.com/testcase?key=5670159510929408 Project: xvid Fuzzing Engine: libFuzzer Fuzz Target: fuzzer-decoder Job Type: libfuzzermsanxvid Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: BitstreamReadHeaders decoderdecode xviddecore...

xvid:fuzzer-decoder: Stack-buffer-overflow in BitstreamReadHeaders

Detailed Report: https://oss-fuzz.com/testcase?key=5747834934001664 Project: xvid Fuzzing Engine: libFuzzer Fuzz Target: fuzzer-decoder Job Type: libfuzzerasanxvid Platform Id: linux Crash Type: Stack-buffer-overflow READ Crash Address: 0x7ffc9e066120 Crash State: BitstreamReadHeaders decoderdeco...

Missing HTTP Security Headers in NetApp OnCommand Workflow Automation - US

Lenovo Security Advisory: LEN-29480 Potential Impact: Information Disclosure Severity: Medium Scope of Impact: Industry-wide CVE Identifier: CVE-2019-5503 Summary Description: NetApp reported that OnCommand Workflow Automation versions prior to 5.0 shipped without certain HTTP Security headers...

ndpi:fuzz_process_packet: Heap-buffer-overflow in getNameLength

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5650190824636416 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzprocesspacket Job Type: libfuzzerasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60700000051e...

openh264:decoder_fuzzer: Use-of-uninitialized-value in WelsDec::CWelsDecoder::ReleaseBufferedReadyPicture

Project: https://github.com/cisco/openh264.git Detailed Report: https://oss-fuzz.com/testcase?key=5169716859764736 Project: openh264 Fuzzing Engine: libFuzzer Fuzz Target: decoderfuzzer Job Type: libfuzzermsanopenh264 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

ndpi:fuzz_process_packet: Heap-buffer-overflow in SHA1Transform

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5638005415215104 Project: ndpi Fuzzing Engine: afl Fuzz Target: fuzzprocesspacket Job Type: aflasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x6100000180f9 Crash State...

ndpi:fuzz_process_packet: Heap-buffer-overflow in SHA1Update

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5752041897197568 Project: ndpi Fuzzing Engine: afl Fuzz Target: fuzzprocesspacket Job Type: aflasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x608000183c74 Crash State:...

ndpi:fuzz_process_packet: Heap-buffer-overflow in ndpi_int_check_stun

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5685300118683648 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzprocesspacket Job Type: libfuzzerasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 16 Crash Address: 0x6060000000c...

ndpi:fuzz_process_packet: Heap-buffer-overflow in getSSCertificateFingerprint

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5735681880227840 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzprocesspacket Job Type: libfuzzerasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x60b00000020d...

qpdf:dct_fuzzer: Use-of-uninitialized-value in ycck_cmyk_convert

Detailed Report: https://oss-fuzz.com/testcase?key=5646580451639296 Project: qpdf Fuzzing Engine: libFuzzer Fuzz Target: dctfuzzer Job Type: libfuzzermsanqpdf Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: ycckcmykconvert sepupsample processdatasimplemain...

xvid:fuzzer-decoder: Use-of-uninitialized-value in interpolate8x8_halfpel_h_c

Detailed Report: https://oss-fuzz.com/testcase?key=5662930544099328 Project: xvid Fuzzing Engine: libFuzzer Fuzz Target: fuzzer-decoder Job Type: libfuzzermsanxvid Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: interpolate8x8halfpelhc interpolate16x16switch...

ffmpeg:ffmpeg_AV_CODEC_ID_IFF_ILBM_fuzzer: Index-out-of-bounds in decodeplane8

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5651995784642560 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDIFFILBMfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash...

ffmpeg:ffmpeg_AV_CODEC_ID_XMA2_fuzzer: Index-out-of-bounds in xma_decode_packet

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5635373899710464 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDXMA2fuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash...

ffmpeg:ffmpeg_AV_CODEC_ID_AGM_fuzzer: Heap-buffer-overflow in decode_inter_plane

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5659333417500672 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDAGMfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address:...

ilchCMS 2.1.23 Cross Site Scripting

Information -------------------- Advisory by Netsparker Name: Multiple Cross-site Scripting Vulnerabilities in ilchCMS 2.1.23 Affected Software: ilchCMS Affected Versions: 2.1.23 Vendor Homepage: https://www.ilch.de/ Vulnerability Type: Cross-site Scripting Severity: Medium Status: Fixed CVSS Sco...

imagemagick:ping_miff_fuzzer: Heap-buffer-overflow in PushDoublePixel

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5700086448783360 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingmifffuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Cras...

opensc:fuzz_pkcs15_reader: Heap-buffer-overflow in bebytes2ulong

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5735919462383616 Project: opensc Fuzzing Engine: libFuzzer Fuzz Target: fuzzpkcs15reader Job Type: libfuzzerasanopensc Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

libreoffice:sftfuzzer: Heap-buffer-overflow in rtl_str_toInt32

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=5732361887285248 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: sftfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash...

opensc:fuzz_pkcs15_reader: Stack-buffer-overflow in cac_cac1_get_certificate

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5654449905467392 Project: opensc Fuzzing Engine: libFuzzer Fuzz Target: fuzzpkcs15reader Job Type: libfuzzerasanopensc Platform Id: linux Crash Type: Stack-buffer-overflow READ Crash Address:...

qpdf:qpdf_fuzzer: Use-of-uninitialized-value in QPDFWriter::unparseObject

Detailed Report: https://oss-fuzz.com/testcase?key=5635403973656576 Project: qpdf Fuzzing Engine: libFuzzer Fuzz Target: qpdffuzzer Job Type: libfuzzermsanqpdf Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: QPDFWriter::unparseObject QPDFWriter::writeObject...