libxaac:xaac_dec_fuzzer: Global-buffer-overflow in ixheaacd_res_ctns_apply

Project: https://github.com/ittiam-systems/libxaac.git Detailed Report: https://oss-fuzz.com/testcase?key=6197755700445184 Project: libxaac Fuzzing Engine: afl Fuzz Target: xaacdecfuzzer Job Type: aflasanlibxaac Platform Id: linux Crash Type: Global-buffer-overflow READ 2 Crash Address:...

CVE-2023-40036 Notepad++ global buffer read overflow in CharDistributionAnalysis::HandleOneChar

Notepad++ is a free and open-source source code editor. Versions 8.5.6 and prior are vulnerable to global buffer read overflow in CharDistributionAnalysis::HandleOneChar. The exploitability of this issue is not clear. Potentially, it may be used to leak internal memory allocation information. As ...

CVE-2023-40036: Buffer Copy without Checking Size of Input

Notepad++ is a free and open-source source code editor. Versions 8.5.6 and prior are vulnerable to global buffer read overflow in CharDistributionAnalysis::HandleOneChar. The exploitability of this issue is not clear. Potentially, it may be used to leak internal memory allocation information. As ...

Global Domains International 2.0 HTML Injection

==================================================================================================================================== | Title : Global Domains International v2.0 HTML inject Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox...

Qualys Tackles 2022’s Top Routinely Exploited Cyber Vulnerabilities

A unified front against malicious cyber actors is climactic in the ever-evolving cybersecurity landscape. The joint Cybersecurity Advisory CSA, a collaboration between leading cybersecurity agencies from the United States, Canada, United Kingdom, Australia, and New Zealand, is a critical guide to...

libxaac:xaac_enc_fuzzer: Global-buffer-overflow in iaace_quantize_lines

Project: https://github.com/ittiam-systems/libxaac.git Detailed Report: https://oss-fuzz.com/testcase?key=6505763408052224 Project: libxaac Fuzzing Engine: libFuzzer Fuzz Target: xaacencfuzzer Job Type: libfuzzerasanlibxaac Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Addres...

INTERPOL + Trend to Fight African Cybercrime Networks

Global threat intelligence helps to disrupt thousands of African cyber crimes networks...

CVE-2021-32422

dpic 2021.01.01 has a Global buffer overflow in theyylex function in main.c and reads out of the bound array...

DEBIAN-CVE-2021-32422

dpic 2021.01.01 has a Global buffer overflow in theyylex function in main.c and reads out of the bound array...

CVE-2021-32422

dpic 2021.01.01 has a Global buffer overflow in theyylex function in main.c and reads out of the bound array...

Buffer overflow

dpic 2021.01.01 has a Global buffer overflow in theyylex function in main.c and reads out of the bound array...

CVE-2021-32422: Buffer Copy without Checking Size of Input

dpic 2021.01.01 has a Global buffer overflow in theyylex function in main.c and reads out of the bound array...

CVE-2021-32422

dpic 2021.01.01 has a Global buffer overflow in theyylex function in main.c and reads out of the bound array...

CVE-2021-32422

dpic 2021.01.01 has a Global buffer overflow in theyylex function in main.c and reads out of the bound array...

CVE-2021-32422

dpic 2021.01.01 has a Global buffer overflow in theyylex function in main.c and reads out of the bound array...

Vulnerabilities fixed in Sonicwall

SonicWall has fixed vulnerabilities in Global Management System GMS and Analytics. A malicious party could exploit them to launch attacks that could result in the following categories of damage: Manipulation of data. Bypassing authentication Circumvention of security measure Remote code execution...

Medium: kernel

Issue Overview: A flaw in the Linux Kernel found in the GFS2 file system. On corrupted gfs2 file systems the evict code can try to reference the journal descriptor structure, jdesc, after it has been freed and set to NULL. It can lead to null pointer dereference when gfs2transbegin being called a...

Attackers demand ransoms for stolen LinkedIn accounts

An ongoing campaign targeting LinkedIn accounts has led to victims losing control of their accounts, or being locked out following repeated login attempts. Whether the attackers are using brute force methods or credential stuffing isn't known, but because some victims are being being locked out...

Jenkins Maven Artifact ChoiceListProvider (Nexus) Plugin vulnerable to exposure of system-scoped credentials

Jenkins Maven Artifact ChoiceListProvider Nexus Plugin 1.14 and earlier does not set the appropriate context for credentials lookup, allowing the use of System-scoped credentials otherwise reserved for the global configuration. This allows attackers with Item/Configure permission to access and...

GHSA-97MG-9JHF-R7RM Jenkins Maven Artifact ChoiceListProvider (Nexus) Plugin vulnerable to exposure of system-scoped credentials

Jenkins Maven Artifact ChoiceListProvider Nexus Plugin 1.14 and earlier does not set the appropriate context for credentials lookup, allowing the use of System-scoped credentials otherwise reserved for the global configuration. This allows attackers with Item/Configure permission to access and...