CVE-2023-34311

Ashlar-Vellum Cobalt Untrusted Pointer Dereference Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit ...

CVE-2023-34309

Ashlar-Vellum Cobalt Untrusted Pointer Dereference Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit ...

PT-2024-25684

Name of the Vulnerable Software and Affected Versions sagemaker-python-sdk versions prior to 2.214.3 Description The capture dependencies function in the sagemaker.serve.save retrive.version 1 0 0.save.utils module allows for potentially unsafe Operating System OS Command Injection if an...

D-Link DAP-1325 security vulnerability

D-Link DAP-1325 is a wireless network extender made by D-Link, which is mainly used to extend the wireless network coverage, support the conversion of wired network and wireless network or connect to different wireless networks. The D-Link DAP-1325 suffers from a stack buffer overflow remote code...

CVE-2024-1897 Grid Gallery – Photo Image Grid Gallery <= 1.4.3 - Authenticated (Contributor+) PHP Object Injection via shortcode

The Grid Gallery – Photo Image Grid Gallery plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.4.3 via deserialization via shortcode of untrusted input from the awlggsettings meta value. This makes it possible for authenticated attackers, with...

ninja:fuzzer: Use-of-uninitialized-value in Lexer::ReadToken

Project: https://github.com/ninja-build/ninja.git Detailed Report: https://oss-fuzz.com/testcase?key=6224855186866176 Project: ninja Fuzzing Engine: libFuzzer Fuzz Target: fuzzer Job Type: libfuzzermsanninja Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

nghttp2:nghttp2_fuzzer_frames: Use-of-uninitialized-value in nghttp2_hd_huff_encode_count

Project: https://github.com/nghttp2/nghttp2.git Detailed Report: https://oss-fuzz.com/testcase?key=5965521773199360 Project: nghttp2 Fuzzing Engine: libFuzzer Fuzz Target: nghttp2fuzzerframes Job Type: libfuzzermsannghttp2 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

libavif:avif_decode_fuzzer: Use-of-uninitialized-value in avifSequenceHeaderParse

Project: https://github.com/AOMediaCodec/libavif.git Detailed Report: https://oss-fuzz.com/testcase?key=5083243719229440 Project: libavif Fuzzing Engine: libFuzzer Fuzz Target: avifdecodefuzzer Job Type: libfuzzermsanlibavif Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

CVE-2024-23461 ZCC macOS Upgrade ZIP Bomb DoS

An Improper Validation of Integrity Check Value vulnerability in Zscaler Client Connector on MacOS during the upgrade process may allow a Local Execution of Code.This issue affects Client Connector on MacOS: before 3.4...

CVE-2023-41970 Repair App local code execution with arbitrary privileges

An Improper Validation of Integrity Check Value vulnerability in Zscaler Client Connector on Windows during the Repair App functionality may allow Local Execution of Code.This issue affects Client Connector on Windows: before 4.1.0.62...

CVE-2023-41970 Repair App local code execution with arbitrary privileges

An Improper Validation of Integrity Check Value vulnerability in Zscaler Client Connector on Windows during the Repair App functionality may allow Local Execution of Code.This issue affects Client Connector on Windows: before 4.1.0.62...

opus:opus_projection_encoder_fuzzer_fixed: Use-of-uninitialized-value in silk_encode_frame_FIX

Project: https://gitlab.xiph.org/xiph/opus.git Detailed Report: https://oss-fuzz.com/testcase?key=6375390378524672 Project: opus Fuzzing Engine: libFuzzer Fuzz Target: opusprojectionencoderfuzzerfixed Job Type: libfuzzermsanopus Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

flac:fuzzer_tool_flac: Use-of-uninitialized-value in write_callback

Project: https://github.com/xiph/flac.git Detailed Report: https://oss-fuzz.com/testcase?key=5929721173966848 Project: flac Fuzzing Engine: libFuzzer Fuzz Target: fuzzertoolflac Job Type: libfuzzermsanflac Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

boringssl:ssl_ctx_api: Use-of-uninitialized-value in ssl_ctx_make_profiles

Project: https://boringssl.googlesource.com/boringssl Detailed Report: https://oss-fuzz.com/testcase?key=6263849463382016 Project: boringssl Fuzzing Engine: libFuzzer Fuzz Target: sslctxapi Job Type: libfuzzermsanboringssl Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

wabt:wat2wasm_fuzzer: Use-of-uninitialized-value in std::__1::__murmur2_or_cityhash<unsigned long, 64ul>::operator

Project: https://github.com/WebAssembly/wabt.git Detailed Report: https://oss-fuzz.com/testcase?key=5545710765277184 Project: wabt Fuzzing Engine: libFuzzer Fuzz Target: wat2wasmfuzzer Job Type: libfuzzermsanwabt Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State...

skia-ftz:image_decode_incremental: Use-of-uninitialized-value in format_message

Detailed Report: https://oss-fuzz.com/testcase?key=5517438365007872 Project: skia-ftz Fuzzing Engine: libFuzzer Fuzz Target: imagedecodeincremental Job Type: libfuzzermsanskia-ftz Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: formatmessage...

tinyusb:cdc: Use-of-uninitialized-value in cdc_task

Project: https://github.com/hathach/tinyusb.git Detailed Report: https://oss-fuzz.com/testcase?key=5375112953004032 Project: tinyusb Fuzzing Engine: libFuzzer Fuzz Target: cdc Job Type: libfuzzermsantinyusb Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

skia-ftz:svg_dom: Use-of-uninitialized-value in SkShaper::MakeStdLanguageRunIterator

Detailed Report: https://oss-fuzz.com/testcase?key=5031219378061312 Project: skia-ftz Fuzzing Engine: libFuzzer Fuzz Target: svgdom Job Type: libfuzzermsanskia-ftz Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: SkShaper::MakeStdLanguageRunIterator...

matio:matio_fuzzer: Use-of-uninitialized-value in Mat_floatSwap

Project: git://git.code.sf.net/p/matio/matio https://github.com/tbeu/matio.git Detailed Report: https://oss-fuzz.com/testcase?key=4759878041141248 Project: matio Fuzzing Engine: libFuzzer Fuzz Target: matiofuzzer Job Type: libfuzzermsanmatio Platform Id: linux Crash Type: Use-of-uninitialized-val...

CVE-2024-23462: Improper Validation of Integrity Check Value

An Improper Validation of Integrity Check Value vulnerability in Zscaler Client Connector on MacOS allows a denial of service of the Client Connector binary and thus removing client functionality.This issue affects Client Connector on MacOS: before 3.4...