pcapplusplus:FuzzTarget: Use-of-uninitialized-value in pcpp::MplsLayer::toString

Detailed Report: https://oss-fuzz.com/testcase?key=6148419743514624 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTarget Job Type: libfuzzermsanpcapplusplus Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: pcpp::MplsLayer::toString...

Linux dbMount Function Code Execution

The vulnerability of the dbMount function fs/jfs/jfsdmap.c in the jfs file system of the Linux operating system is related to the issue where writing operations go beyond the array boundaries when indexing is performed, especially when attempting to mount a faulty file system with an incorrect...

Sql injection

The UserPro plugin for WordPress is vulnerable to unauthorized password resets in versions up to, and including 5.1.1. This is due to the plugin using native password reset functionality, with insufficient validation on the password reset function userproprocessform. The function uses the plainte...

CVE-2023-2449 UserPro <= 5.1.1 - Insecure Password Reset Mechanism

The UserPro plugin for WordPress is vulnerable to unauthorized password resets in versions up to, and including 5.1.1. This is due to the plugin using native password reset functionality, with insufficient validation on the password reset function userproprocessform. The function uses the plainte...

pcapplusplus:FuzzTarget: Use-of-uninitialized-value in pcpp::SomeIpSdEntry::SomeIpSdEntry

Detailed Report: https://oss-fuzz.com/testcase?key=5785322721771520 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTarget Job Type: libfuzzermsanpcapplusplus Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: pcpp::SomeIpSdEntry::SomeIpSdEntry...

SUSE CVE-2023-41913

strongSwan before 5.9.12 has a buffer overflow and possible unauthenticated remote code execution via a DH public value that exceeds the internal buffer in charon-tkm's DH proxy. The earliest affected version is 5.3.0. An attack can occur via a crafted IKESAINIT message...

Foxit PDF Editor < 2023.3 Multiple Vulnerabilities

According to its version, the Foxit PDF Editor application previously named Foxit PhantomPDF installed on the remote Windows host is prior to 2023.3. It is, therefore affected by multiple vulnerabilities: - A use-after-free vulnerability exists in the way Foxit Reader 12.1.2.15356 handles 3D...

Siemens SCALANCE Improper Return Value

The vulnerability of Siemens SCALANCE industrial switches’ microprogramming software is related to incorrect checking of the return value of methods or functions. Exploiting this vulnerability could allow a malicious actor to disable user notifications remotely...

kernel: out-of-bounds write in qfq_change_class function

An out-of-bounds memory access flaw was found in the Linux kernel’s traffic control QoS subsystem in how a user triggers the qfqchangeclass function with an incorrect MTU value of the network device used as lmax. This flaw allows a local user to crash or potentially escalate their privileges on t...

SUSE CVE-2023-48233

Vim is an open source command line text editor. If the count after the :s command is larger than what fits into a signed long variable, abort with evaluetoolarge. Impact is low, user interaction is required and a crash may not even happen in all situations. This issue has been addressed in commit...

CVE-2023-28802: Improper Validation of Integrity Check Value

An Improper Validation of Integrity Check Value in Zscaler Client Connector on Windows allows an authenticated user to disable ZIA/ZPA by interrupting the service restart from Zscaler Diagnostics. This issue affects Client Connector: before 4.2.0.149...

pcre2:pcre2_fuzzer: Use-of-uninitialized-value in parse_regex

Project: svn://vcs.exim.org/pcre2/code/trunk https://github.com/PCRE2Project/pcre2.git Detailed Report: https://oss-fuzz.com/testcase?key=5473192902524928 Project: pcre2 Fuzzing Engine: libFuzzer Fuzz Target: pcre2fuzzer Job Type: libfuzzermsanpcre2 Platform Id: linux Crash Type:...

CVE-2023-41913

strongSwan before 5.9.12 has a buffer overflow and possible unauthenticated remote code execution via a DH public value that exceeds the internal buffer in charon-tkm's DH proxy. The earliest affected version is 5.3.0. An attack can occur via a crafted IKESAINIT message...

PT-2023-9741

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.0-rc3 Description The issue is related to the virtio/vsock component of the Linux kernel. It occurs because the buf alloc and fwd cnt fields of the struct virtio vsock hdr are not initialized when a new skb i...

pigweed:encoder_fuzz_test: Use-of-uninitialized-value in constexpr_c_functions.h

Detailed Report: https://oss-fuzz.com/testcase?key=5417308465790976 Project: pigweed Fuzzing Engine: libFuzzer Fuzz Target: encoderfuzztest Job Type: libfuzzermsanpigweed Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: constexprcfunctions.h std::2::basicstrin...

pigweed:detokenize_fuzzer: Use-of-uninitialized-value in pw::tokenizer::Detokenizer::Detokenize

Detailed Report: https://oss-fuzz.com/testcase?key=4827947886051328 Project: pigweed Fuzzing Engine: libFuzzer Fuzz Target: detokenizefuzzer Job Type: libfuzzermsanpigweed Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: pw::tokenizer::Detokenizer::Detokenize...

VulnCheck KEV: CVE-2019-17506

There are some web interfaces without authentication requirements on D-Link DIR-868L B1-2.03 and DIR-817LW A1-1.04 routers. An attacker can get the router's username and password and other information via a DEVICE.ACCOUNT value for SERVICES in conjunction with AUTHORIZEDGROUP=1%0a to getcfg.php...

cloud-init security, bug fix, and enhancement update

23.1.1-10.0.1 - Added missing services in rhel/systemd/cloud-init.service Orabug: 32183938 - Add IPv6 IMDS and dhcp6 support for Oracle Datasource Orabug: 35470783 - Increase retry value and add timeout for OCI Orabug: 35329883 - Fix log file permissions Orabug: 35302985 - Update detection logic...

DEBIAN-CVE-2023-48233

Vim is an open source command line text editor. If the count after the :s command is larger than what fits into a signed long variable, abort with evaluetoolarge. Impact is low, user interaction is required and a crash may not even happen in all situations. This issue has been addressed in commit...

CVE-2023-43275

Cross-Site Request Forgery CSRF vulnerability in DedeCMS v5.7 in 110 backend management interface via /catalogadd.php, allows attackers to create crafted web pages due to a lack of verification of the token value of the submitted form...