4 matches found
liblouis:fuzz_backtranslate: Use-of-uninitialized-value in addRule
Detailed Report: https://oss-fuzz.com/testcase?key=4821372074524672 Project: liblouis Fuzzing Engine: libFuzzer Fuzz Target: fuzzbacktranslate Job Type: libfuzzermsanliblouis Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: addRule compileRule compileFile...
liblouis:fuzz_translate_generic: Index-out-of-bounds in addRule
Project: https://github.com/liblouis/liblouis.git Detailed Report: https://oss-fuzz.com/testcase?key=4980070113214464 Project: liblouis Fuzzing Engine: libFuzzer Fuzz Target: fuzztranslategeneric Job Type: libfuzzerubsanliblouis Platform Id: linux Crash Type: Index-out-of-bounds Crash Address:...
CVE-2012-4923
Multiple cross-site scripting XSS vulnerabilities in Endian Firewall 2.4 allow remote attackers to inject arbitrary web script or HTML via the 1 createrule parameter to dnat.cgi, 2 addrule parameter to dansguardian.cgi, or 3 PATHINFO to openvpnusers.cgi...
Endian Firewall 2.4 - dansguardian.cgi?addrule Cross-Site Scripting
Endian Firewall 2.4 - dansguardian.cgi?addrule Cross-Site Scripting source: https://www.securityfocus.com/bid/52076/info Endian Firewall is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an...