Dell, HP Memory-Access Bugs Open Attacker Path to Kernel Privileges

Vulnerabilities in Dell and HP laptops could allow an attacker to access information and gain kernel privileges via the devices’ Direct Memory Access DMA capability. DMA is a processing-efficiency approach for peripherals such as PCI cards or network interface cards that, as the name suggests,...

mysql-server:fuzz_real_query: Heap-buffer-overflow in read_ok_ex

Project: https://github.com/mysql/mysql-server.git Detailed Report: https://oss-fuzz.com/testcase?key=5685777698127872 Project: mysql-server Fuzzing Engine: libFuzzer Fuzz Target: fuzzrealquery Job Type: libfuzzerasanmysql-server Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash...

graphicsmagick:coder_WPG_fuzzer: Heap-buffer-overflow in InsertRow

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=5718137723158528 Project: graphicsmagick Fuzzing Engine: afl Fuzz Target: coderWPGfuzzer Job Type: aflasangraphicsmagick Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 2 Crash Addres...

CVE-2019-1414

An elevation of privilege vulnerability exists in Visual Studio Code when it exposes a debug listener to users of a local computer, aka ‘Visual Studio Code Elevation of Privilege Vulnerability’. Recent assessments: goodlandsecurity at May 20, 2020 2:28am UTC reported: Vulnerability: An elevation ...

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2019-1474)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

php:php-fuzz-mbstring: Heap-use-after-free in optimize_nodes

Detailed Report: https://oss-fuzz.com/testcase?key=5688240959127552 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-mbstring Job Type: libfuzzerasani386php Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0xf52376a0 Crash State: optimizenodes optimizenodes...

Citrix Releases Patches for Critical ADC Vulnerability Under Active Attack

Citrix has finally started rolling out security patches for a critical vulnerability in ADC and Gateway software that attackers started exploiting in the wild earlier this month after the company announced the existence of the issue without releasing any permanent fix. I wish I could say, "better...

lz4:decompress_fuzzer: Heap-buffer-overflow in LZ4_decompress_safe_forceExtDict

Detailed Report: https://oss-fuzz.com/testcase?key=5720493764378624 Project: lz4 Fuzzing Engine: libFuzzer Fuzz Target: decompressfuzzer Job Type: libfuzzerasani386lz4 Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address: 0xf6101c19 Crash State: LZ4decompresssafeforceExtDict...

cras:rclient_message: Heap-buffer-overflow in surround51_to_stereo_downmix_mtx

Detailed Report: https://oss-fuzz.com/testcase?key=4859293161750528 Project: cras Fuzzing Engine: honggfuzz Fuzz Target: rclientmessage Job Type: honggfuzzasancras Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0x6030000018f0 Crash State: surround51tostereodownmixmtx...

CVE-2020-2674

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 and prior to 6.1.2. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle ...

unicorn:fuzz_emu_arm_thumb: Crash in gen_mftr

Project: https://github.com/unicorn-engine/unicorn.git Detailed Report: https://oss-fuzz.com/testcase?key=5157471400493056 Project: unicorn Fuzzing Engine: afl Fuzz Target: fuzzemuarmthumb Job Type: aflasanunicorn Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x000001000129 Crash...

graphicsmagick:enhance_fuzzer: Heap-buffer-overflow in InsertRow

Detailed Report: https://oss-fuzz.com/testcase?key=5758629114544128 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: enhancefuzzer Job Type: libfuzzerasangraphicsmagick Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 2 Crash Address: 0x7f3759afae04 Crash State: InsertRow...

libreoffice:ww8fuzzer: Heap-use-after-free in SvxMSDffImportData::NotifyFreeObj

Detailed Report: https://oss-fuzz.com/testcase?key=5662761686401024 Project: libreoffice Fuzzing Engine: afl Fuzz Target: ww8fuzzer Job Type: aflasanlibreoffice Platform Id: linux Crash Type: Heap-use-after-free WRITE 8 Crash Address: 0x60f00005f0e0 Crash State: SvxMSDffImportData::NotifyFreeObj...

Cisco Webex Bug Allows Remote Code Execution

Cisco Systems has fixed two high-severity vulnerabilities in its products, including one in its popular Webex video conferencing platform that could enable a remote attacker to execute commands. The high-severity Webex flaw exists in the web-based management interface of Cisco Webex Video Mesh, a...

NVIDIA GeForce Experience Update - Lenovo Support US

Lenovo Security Advisory: LEN-30236 Potential Impact: Denial of Service or Escalation of Privilege Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE‑2019‑5702 Summary Description: NVIDIA has released a software security update for NVIDIA GeForce Experience. This update addresses a...

NVIDIA GeForce Experience Update - Lenovo Support US

No description provided...

envoy:server_fuzz_test: Heap-use-after-free in Envoy::Grpc::Internal::sendMessageUntyped

Project: https://github.com/envoyproxy/envoy.git Detailed Report: https://oss-fuzz.com/testcase?key=5723075140386816 Project: envoy Fuzzing Engine: libFuzzer Fuzz Target: serverfuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address:...

Fedora 30 : wordpress (2019-da7b49a4b1)

WordPress 5.3.2 Maintenance Release Shortly after WordPress 5.3.1 was released, a couple of high severity Trac tickets were opened. The Core team scheduled this quick maintenance release to resolve these issues. Main issues addressed in 5.3.2 : - Date/Time: Ensure that getfeedbuilddate correctly...

ERPNext 11.1.47 Cross Site Scripting

Information -------------------- Advisory by Netsparker Name: Multiple Reflected Cross-site Scripting Vulnerabilities in ERPNext Affected Software: ERPNext Affected Versions: 11.1.47 Vendor Homepage: https://erpnext.com/ Vulnerability Type: Reflected Cross-site Scripting Severity: High Status:...

imagemagick:encoder_label_fuzzer: Heap-buffer-overflow in FxEvaluateSubexpression

Detailed Report: https://oss-fuzz.com/testcase?key=5746193716215808 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderlabelfuzzer Job Type: libfuzzerasani386imagemagick Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0xf4ed5cff Crash State:...