PT-2024-27050

Name of the Vulnerable Software and Affected Versions Undertow affected versions not specified Description A vulnerability was found in Undertow, which requires the learning-push handler to be enabled in the server's config. By default, this handler is disabled. If enabled and the maxAge config i...

libraw:libraw_cr2_fuzzer: Use-of-uninitialized-value in LibRaw::parseLeicaMakernote

Project: https://github.com/libraw/libraw.git Detailed Report: https://oss-fuzz.com/testcase?key=6494926154563584 Project: libraw Fuzzing Engine: libFuzzer Fuzz Target: librawcr2fuzzer Job Type: libfuzzermsanlibraw Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

libwebp:imageio_fuzzer: Use-of-uninitialized-value in my_error_exit

Project: https://chromium.googlesource.com/webm/libwebp Detailed Report: https://oss-fuzz.com/testcase?key=6206133828648960 Project: libwebp Fuzzing Engine: libFuzzer Fuzz Target: imageiofuzzer Job Type: libfuzzermsanlibwebp Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

libwebp:[email protected]: Use-of-uninitialized-value in my_error_exit

Project: https://chromium.googlesource.com/webm/libwebp Detailed Report: https://oss-fuzz.com/testcase?key=4980066560311296 Project: libwebp Fuzzing Engine: libFuzzer Fuzz Target: [email protected] Job Type: libfuzzermsanlibwebp Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

gnutls:gnutls_x509_crq_parser_fuzzer: Use-of-uninitialized-value in gnutls_x509_crq_get_version

Project: https://gitlab.com/gnutls/gnutls.git Detailed Report: https://oss-fuzz.com/testcase?key=5149206487040000 Project: gnutls Fuzzing Engine: libFuzzer Fuzz Target: gnutlsx509crqparserfuzzer Job Type: libfuzzermsangnutls Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

unrar:unrar_fuzzer: Use-of-uninitialized-value in DataHash::Cmp

Detailed Report: https://oss-fuzz.com/testcase?key=4793240549654528 Project: unrar Fuzzing Engine: libFuzzer Fuzz Target: unrarfuzzer Job Type: libfuzzermsanunrar Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: DataHash::Cmp CmdExtract::ExtractCurrentFile...

CVE-2024-39178

creationtimestamp| type| source ---|---|--- 2024-07-05 20:01:30+00:00| seen| https://t.me/cvedetector/120...

AZL-43267 CVE-2024-39472 affecting package kernel for versions less than 5.15.167.1-1

In the Linux kernel, the following vulnerability has been resolved: xfs: fix log recovery buffer allocation for the legacy hsize fixup Commit a70f9fe52daa "xfs: detect and handle invalid iclog size set by mkfs" added a fixup for incorrect hsize values used for the initial umount record in old...

PT-2024-28332 · Idccms · Idccms

Name of the Vulnerable Software and Affected Versions: idccms version 1.35 Description: The issue is related to a Cross-Site Request Forgery CSRF in the component /admin/vpsApiData deal.php. The mudi parameter is involved, specifically when set to del. This allows for unauthorized actions to be...

CVE-2024-6426

Information exposure vulnerability in MESbook 20221021.03 version, the exploitation of which could allow a local attacker, with user privileges, to access different resources by changing the API value of the application...

CVE-2024-6426

Information exposure vulnerability in MESbook 20221021.03 version, the exploitation of which could allow a local attacker, with user privileges, to access different resources by changing the API value of the application...

CVE-2024-6426 Information exposure vulnerability vulnerability in MESbook

Information exposure vulnerability in MESbook 20221021.03 version, the exploitation of which could allow a local attacker, with user privileges, to access different resources by changing the API value of the application...

CVE-2024-6426

Affected software: MESbook, version 20221021.03. Vulnerability: Information exposure via changing the application’s API value, allowing a local attacker with user privileges to access different resources. Root cause / vector: Modifying API values exposes resources that should be restricted. Impac...

CVE-2024-6426 Information exposure vulnerability vulnerability in MESbook

Information exposure vulnerability in MESbook 20221021.03 version, the exploitation of which could allow a local attacker, with user privileges, to access different resources by changing the API value of the application...

CVE-2024-6426: Exposure of Sensitive Information to an Unauthorized Actor

Information exposure vulnerability in MESbook 20221021.03 version, the exploitation of which could allow a local attacker, with user privileges, to access different resources by changing the API value of the application...

PT-2024-37618 · Mesbook · Mesbook

Name of the Vulnerable Software and Affected Versions: MESbook version 20221021.03 Description: The issue is an information exposure vulnerability that could allow a local attacker with user privileges to access different resources by changing the API value of the application. Recommendations: Fo...

imagemagick:encoder_psd_fuzzer: Use-of-uninitialized-value in WritePixelCachePixels

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=4945184400408576 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderpsdfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Cra...

binutils:fuzz_as: Use-of-uninitialized-value in output_insn

Detailed Report: https://oss-fuzz.com/testcase?key=4536948775518208 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzas Job Type: libfuzzermsanbinutils Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: outputinsn mdassemble readasourcefile Sanitizer...

qemu-kvm: 'qemu-img info' leads to host file read/write

A flaw was found in the QEMU disk image utility qemu-img 'info' command. A specially crafted image file containing a json: value describing block devices in QMP could cause the qemu-img process on the host to consume large amounts of memory or CPU time, leading to denial of service or read/write ...

CVE-2024-4467 Qemu-kvm: 'qemu-img info' leads to host file read/write

A flaw was found in the QEMU disk image utility qemu-img 'info' command. A specially crafted image file containing a json: value describing block devices in QMP could cause the qemu-img process on the host to consume large amounts of memory or CPU time, leading to denial of service or read/write ...