libressl/asn1: Heap-buffer-overflow in do_print_ex

Project: https://github.com/libressl-portable/portable.git Detailed report: https://oss-fuzz.com/testcase?key=5685609458302976 Project: libressl Fuzzer: libFuzzerlibresslasn1 Fuzz target binary: asn1 Job Type: libfuzzerasanlibressl Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

lame/fuzzer-encoder: Heap-buffer-overflow in do_copy_buffer

Detailed report: https://oss-fuzz.com/testcase?key=5717291922096128 Project: lame Fuzzer: libFuzzerlamefuzzer-encoder Fuzz target binary: fuzzer-encoder Job Type: libfuzzerasanlame Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address: 0x61d000000894 Crash State: docopybuffer...

CVE-2018-18762

SaltOS 3.1 r8126 contains a database download vulnerability...

CVE-2018-18882

A stored cross-site scripting XSS issue was discovered in ControlByWeb X-320M-I Web-Enabled Instrumentation-Grade Data Acquisition module 1.05 with firmware revision v1.05. An authenticated user can inject arbitrary script via setup.html in the web interface...

php/php-fuzz-exif: Heap-buffer-overflow in php_ifd_get32s

Detailed report: https://oss-fuzz.com/testcase?key=5684144401547264 Project: php Fuzzer: libFuzzerphpphp-fuzz-exif Fuzz target binary: php-fuzz-exif Job Type: libfuzzerasanphp Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60f0000014a1 Crash State: phpifdget32s...

CVE-2019-8268

UltraVNC revision 1206 has multiple off-by-one vulnerabilities in VNC client code connected with improper usage of ClientConnection::ReadString function, which can potentially result code execution. This attack appears to be exploitable via network connectivity. These vulnerabilities have been...

CVE-2019-8273

UltraVNC revision 1211 has a heap buffer overflow vulnerability in VNC server code inside file transfer request handler, which can potentially result in code execution. This attack appears to be exploitable via network connectivity. This vulnerability has been fixed in revision 1212...

CVE-2019-8266

CVE-2019-8266 affects UltraVNC revision 1207 where multiple out-of-bounds access vulnerabilities in the VNC client code (ClientConnection::Copybuffer) could lead to code execution. Exploitation is described as network‑based with user interaction required to trigger, and the issues were fixed in r...

CVE-2019-8264

UltraVNC vulnerability CVE-2019-8264 is a memory-safe/out-of-bounds access issue in the VNC client of the Ultra2 decoder (revision 1203). It could allow remote code execution over the network and has a fix in revision 1204. Affected product: UltraVNC, Ultra2 decoder; the issue is tied to out-of-b...

CVE-2019-8272

UltraVNC 1211 contains off-by-one vulnerabilities in the VNC server code that can potentially lead to remote code execution when exploited over a network. The issue is fixed in revision 1212. A Nessus plugin also documents other related UltraVNC CVEs (e.g., 2019-8274, 2019-8271) affecting version...

CVE-2019-8277

UltraVNC revision 1211 contains multiple memory leaks CWE-665 in VNC server code, which allows an attacker to read stack memory and can be abused for information disclosure. Combined with another vulnerability, it can be used to leak stack memory and bypass ASLR. This attack appears to be...

CVE-2019-8267

Vulnerability summary (CVE-2019-8267) : UltraVNC revision 1207 contains an out-of-bounds read in the VNC client code within the TextChat module, leading to a denial-of-service condition. Exploitation is possible over the network. Siemens/ENISA and CNVD/NVD entries corroborate the same issue and p...

CVE-2019-8277

UltraVNC revision 1211 contains multiple memory-leak vulnerabilities (CWE-665) in the VNC server code that can allow an attacker to read stack memory and, with other vulnerabilities, bypass ASLR. The issues are exploitable via network connectivity and have been fixed in revision 1212. This CVE en...

CVE-2019-8271

UltraVNC revision 1211 contains a heap-based buffer overflow in the VNC server file transfer handler that could potentially allow remote code execution when exploited over the network. The issue is fixed in revision 1212; affected products are UltraVNC with the vulnerable server component, and re...

CVE-2019-8265

UltraVNC revision 1207 has multiple out-of-bounds access vulnerabilities connected with improper usage of SETPIXELS macro in VNC client code, which can potentially result in code execution. This attack appears to be exploitable via network connectivity. These vulnerabilities have been fixed in...

CVE-2019-8276

UltraVNC revision 1211 has a stack buffer overflow vulnerability in VNC server code inside file transfer request handler, which can result in Denial of Service DoS. This attack appears to be exploitable via network connectivity. This vulnerability has been fixed in revision 1212...

CVE-2019-8269

CVE-2019-8269 describes a stack-based buffer overflow in UltraVNC before revision 1207, specifically in the VNC client code within the FileTransfer module. The vulnerability in revision 1206 can lead to a denial-of-service condition and is reported as exploitable over network connectivity. The is...

CVE-2019-8275

UltraVNC revision 1211 contains multiple improper null termination vulnerabilities in the VNC server code, allowing out-of-bounds data access via network. CVSS v3.1 base score 9.8. Affected: UltraVNC 1211; fix: upgrade to revision 1212 (addressed in the same family of issues).

CVE-2019-8270

UltraVNC is affected by CVE-2019-8270 due to an out-of-bounds read in the VNC client code inside the Ultra decoder (revision 1210), which can lead to denial of service. The issue is exploitable via network connectivity and has been fixed in revision 1211. Connected sources corroborate a sequence ...

CVE-2019-8272

UltraVNC revision 1211 has multiple off-by-one vulnerabilities in VNC server code, which can potentially result in code execution. This attack appears to be exploitable via network connectivity. These vulnerabilities have been fixed in revision 1212...