libredwg:llvmfuzz: Heap-buffer-overflow in bit_TV_to_utf8_codepage

Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=4855530647322624 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerasanlibredwg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

Open Babel pFormat Code Execution

The vulnerability of the pFormat function in the Open Babel software for converting chemical substance formats is related to the use of an uninitialized pointer. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

[SECURITY] Fedora 37 Update: ghostscript-9.56.1-9.fc37

This package provides useful conversion utilities based on Ghostscript softwa re, for converting PS, PDF and other document formats between each other. Ghostscript is a suite of software providing an interpreter for Adobe Systems' PostScript PS and Portable Document Format PDF page description...

WordPress WooCommerce Enhanced Ecommerce Analytics Integration with Conversion Tracking Plugin <= 3.7.1 is vulnerable to Cross Site Request Forgery (CSRF)

Software WooCommerce Enhanced Ecommerce Analytics Integration with Conversion Tracking Type Plugin Vulnerable versions = 3.7.1 Fixed in 3.7.2 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-40561 Patch priority Low CVSS severity Low 5.4 Developer...

How to create a Rewrite policy that will change characters in URL to lowercase

How to create a Rewrite policy that will change characters in URL to lowercase...

[SECURITY] Fedora 38 Update: ghostscript-10.01.2-3.fc38

This package provides useful conversion utilities based on Ghostscript softwa re, for converting PS, PDF and other document formats between each other. Ghostscript is a suite of software providing an interpreter for Adobe Systems' PostScript PS and Portable Document Format PDF page description...

WebKit PDF Code Execution

The vulnerability of the Web page rendering module in the WebKit PDF operating system for macOS is related to data type conversion errors. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Code injection

Dangerzone is software for converting potentially dangerous PDFs, office documents, or images to safe PDFs. The Dangerzone CLI dangerzone-cli command logs output from the container where the file sanitization takes place, to the user's terminal. Prior to version 0.4.2, if the container is...

CVE-2023-39342 Dangerzone CLI does not sanitize ANSI escape characters

Dangerzone is software for converting potentially dangerous PDFs, office documents, or images to safe PDFs. The Dangerzone CLI dangerzone-cli command logs output from the container where the file sanitization takes place, to the user's terminal. Prior to version 0.4.2, if the container is...

RLSA-2023:4176 Moderate: java-1.8.0-openjdk security and bug fix update

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security Fixes: OpenJDK: improper handling of slash characters in URI-to-path conversion 8305312 CVE-2023-22049 OpenJDK: array indexing integer overflow issue 8304468...

CVE-2023-21651

Memory Corruption in Core due to incorrect type conversion or cast in secureioread/write function in TEE...

Memory corruption

Memory Corruption in Core due to incorrect type conversion or cast in secureioread/write function in TEE...

CVE-2023-21651

CVE-2023-21651 affects Qualcomm closed‑source components, described as memory corruption in Core due to an incorrect type conversion or cast in the secure_io_read/write function in TEE. The vulnerability stems from the type handling in secure I/O, enabling memory corruption within the core when p...

CVE-2023-21651 Incorrect Type Conversion or Cast in Core

Memory Corruption in Core due to incorrect type conversion or cast in secureioread/write function in TEE...

CVE-2023-21651 Incorrect Type Conversion or Cast in Core

Memory Corruption in Core due to incorrect type conversion or cast in secureioread/write function in TEE...

CVE-2023-21627 Incorrect Type Conversion or Cast in Trusted Execution Environment

Memory corruption in Trusted Execution Environment while calling service API with invalid address...

Qualcomm Chip Code Issue Vulnerability

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way to miniaturize circuits mainly semiconductor devices, but also passive components, etc. and are often manufactured on the surface of semiconductor wafers. A security vulnerability exists in the Qualcomm chip that stems from an...

Google Chrome MathML Code Execution

The vulnerability of the MathML component in Google Chrome browser is related to errors in data type conversion. Exploiting this vulnerability could allow an attacker to cause service failures or execute arbitrary code...

Code injection

Nuclei is a vulnerability scanner. Prior to version 2.9.9, a security issue in the Nuclei project affected users utilizing Nuclei as Go code SDK running custom templates. This issue did not affect CLI users. The problem was related to sanitization issues with payload loading in sandbox mode. Ther...

Missing validation checks on sending non blocking LZ payload

Lines of code Vulnerability details Impact In OFTCoreV2 provided as example by LayerZero function sendaddress from, uint16 dstChainId, bytes32 toAddress, uint amount, address payable refundAddress, address zroPaymentAddress, bytes memory adapterParams internal virtual returns uint amount...