CVE-2019-10087

On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the Page Revision History, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about...

CVE-2019-10087

On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the Page Revision History, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about...

Information disclosure

On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the Page Revision History, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about...

CVE-2019-10087

On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the Page Revision History, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about...

CVE-2019-10087

On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the Page Revision History, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about...

CVE-2019-10087: Improper Neutralization of Input During Web Page Generation

On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the Page Revision History, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about...

PT-2019-11425

Name of the Vulnerable Software and Affected Versions: Apache JSPWiki versions prior to 2.11.0.M4 Description: A carefully crafted plugin link invocation could trigger an issue related to the Page Revision History, allowing an attacker to execute javascript in the victim's browser and potentially...

cryptofuzz:cryptofuzz-openssl-noasm: Heap-use-after-free in CRYPTO_ocb128_cleanup

Detailed Report: https://oss-fuzz.com/testcase?key=5685695649153024 Project: cryptofuzz Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-openssl-noasm Job Type: libfuzzerasancryptofuzz Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x618000000b48 Crash State:...

xvid:fuzzer-decoder: Heap-buffer-overflow in BitstreamSkip

Detailed Report: https://oss-fuzz.com/testcase?key=5711081858662400 Project: xvid Fuzzing Engine: libFuzzer Fuzz Target: fuzzer-decoder Job Type: libfuzzerasanxvid Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x626000002b40 Crash State: BitstreamSkip getdcsizelum...

xvid:fuzzer-decoder: Crash in decoder_decode

Detailed Report: https://oss-fuzz.com/testcase?key=5651853588561920 Project: xvid Fuzzing Engine: libFuzzer Fuzz Target: fuzzer-decoder Job Type: libfuzzermsanxvid Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x0000fffff801 Crash State: decoderdecode xviddecore fuzzer.cpp Sanitizer...

xvid:fuzzer-decoder: Crash in image_setedges

Detailed Report: https://oss-fuzz.com/testcase?key=5631794212241408 Project: xvid Fuzzing Engine: libFuzzer Fuzz Target: fuzzer-decoder Job Type: libfuzzerasanxvid Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x62f10001047f Crash State: imagesetedges decoderpframe decoderdecode...

libxslt:xpath: Heap-buffer-overflow in xsltFormatNumberConversion

Project: https://gitlab.gnome.org/GNOME/libxslt.git Detailed Report: https://oss-fuzz.com/testcase?key=5656808252768256 Project: libxslt Fuzzing Engine: afl Fuzz Target: xpath Job Type: aflasanlibxslt Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60300000131f Crash...

FreeBSD-SA-19:23.midi

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-19:23.midi Security Advisory The FreeBSD Project Topic: kernel memory disclosure from /dev/midistat Category: core Module: sound Announced: 2019-08-20 Credits:...

wireshark:fuzzshark_ip: Heap-use-after-free in wmem_str_hash

Detailed Report: https://oss-fuzz.com/testcase?key=5654423381999616 Project: wireshark Fuzzing Engine: libFuzzer Fuzz Target: fuzzsharkip Job Type: libfuzzerasanwireshark Platform Id: linux Crash Type: Heap-use-after-free READ 2 Crash Address: 0x60200218c390 Crash State: wmemstrhash wmemmaplookup...

CloudBees Jenkins Pipeline: Shared Groovy Libraries Plugin Authorization Issue Vulnerability

CloudBees Jenkins Hudson Labs is a set of Java-based continuous integration tools from CloudBees, Inc. The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks . Pipeline: Shared Groovy Libraries Plugin is used in one of the plugin provid...

PT-2019-7626

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 55.9999.141 Description The issue allows ACL bypass for AppConfig applications. This is achieved via the magic revision parameter. Recommendations For versions prior to 55.9999.141, update to version 55.9999.141 or lat...

Missing permission check in workflow-cps-global-lib

workflow-cps-global-lib provides form validation to determine whether the revision e.g. commit, tag, or branch name specified for a global library exists in the repository. This form validation method lacked a permission check, allowing attackers with Overall/Read access to determine whether an...

Arduino has an unspecified vulnerability

Arduino is a microcontroller board for the Arduino project. A security vulnerability exists in the embedded system in versions prior to Arduino Rev3. A remote attacker could exploit the vulnerability to send data to LEDs...

The vulnerability in the implementation of the udc_pci_probe handler in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the udcpciprobe handler in the Linux kernel’s drivers/usb/gadget/udc/amd5536udc.ko module is related to the repeated memory release mechanism. Exploiting this vulnerability can allow an attacker to cause a system failure by connecting an AMD5536 UDC device, which appears as a...

wireshark/fuzzshark_ip_proto-udp: Heap-buffer-overflow in reassemble_continuation_state

Detailed report: https://oss-fuzz.com/testcase?key=5661584824729600 Project: wireshark Fuzzer: aflwiresharkfuzzsharkipproto-udp Fuzz target binary: fuzzsharkipproto-udp Job Type: aflasanwireshark Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address: 0x604002190634 Crash State:...