llvm: Heap-buffer-overflow in llvm::DataExtractor::getU32

Project: https://github.com/llvm/llvm-project.git Detailed report: https://oss-fuzz.com/testcase?key=5615216987471872 Project: llvm Fuzzer: libFuzzerllvmllvm-dwarfdump-fuzzer Fuzz target binary: llvm-dwarfdump-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Heap-buffer-overflow...

dlplibs: Index-out-of-bounds in WKS4Chart::sendCharts

Detailed report: https://oss-fuzz.com/testcase?key=5151574194126848 Project: dlplibs Fuzzer: libFuzzerdlplibswksfuzzer Fuzz target binary: wksfuzzer Job Type: libfuzzerubsandlplibs Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: WKS4Chart::sendCharts WKS4Parser::par...

OWASPZAP v2.5.0 - Remote Code Execution Vulnerability

Document Title: =============== OWASPZAP v2.5.0 - Remote Code Execution Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2096 Video: https://www.youtube.com/watch?v=41gr2XhSOw Release Date: ============= 2017-09-17 Vulnerability Laboratory ID VL-ID:...

librawspeed: Use-of-uninitialized-value in rawspeed::RawImageData::checkMemIsInitialized

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=6742688382582784 Project: librawspeed Fuzzer: libFuzzerlibrawspeedTiffDecoderFuzzer-PefDecoder Fuzz target binary: TiffDecoderFuzzer-PefDecoder Job Type: libfuzzermsanlibrawspeed Platform Id:...

llvm: Heap-buffer-overflow in llvm::DataExtractor::getU32

Project: https://github.com/llvm/llvm-project.git Detailed report: https://oss-fuzz.com/testcase?key=6584699101118464 Project: llvm Fuzzer: libFuzzerllvmllvm-dwarfdump-fuzzer Fuzz target binary: llvm-dwarfdump-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Heap-buffer-overflow...

proj4: Index-out-of-bounds in reverse_obs

Detailed report: https://oss-fuzz.com/testcase?key=6621912241274880 Project: proj4 Fuzzer: libFuzzerproj4standardfuzzer Fuzz target binary: standardfuzzer Job Type: libfuzzerubsanproj4 Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: reverseobs pjinvobs projtransobs...

librawspeed: Crash in rawspeed::RawImageData::transferBadPixelsToMap

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=5981560719278080 Project: librawspeed Fuzzer: libFuzzerlibrawspeedTiffDecoderFuzzer-DngDecoder Fuzz target binary: TiffDecoderFuzzer-DngDecoder Job Type: libfuzzerasanlibrawspeeduntrusted...

openthread: Stack-buffer-overflow in ot::Tlv::GetNext

Project: https://github.com/openthread/openthread.git Detailed report: https://oss-fuzz.com/testcase?key=6361422072119296 Project: openthread Fuzzer: libFuzzeropenthreadip6-send-fuzzer Fuzz target binary: ip6-send-fuzzer Job Type: libfuzzerasanopenthreaduntrusted Platform Id: linux Crash Type:...

Play TV 1.25.1 Build r123776 DLL Hijacking

Document Title: =============== Play TV v1.25.1Build r123776 - DLL Hijack Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2085 Release Date: ============= 2017-09-04 Vulnerability Laboratory ID VL-ID: ====================================...

CodeMeter 6.50 - Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Document Title: =============== Wibu Systems AG CodeMeter 6.50 - Persistent XSS Vulnerability References Source: ==================== http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-13754 CVE-ID: ======= CVE-2017-13754 Current Estimat...

gdal: Heap-buffer-overflow in memBitRead

Detailed report: https://oss-fuzz.com/testcase?key=4659886891728896 Project: gdal Fuzzer: libFuzzergdalfuzzer Fuzz target binary: gdalfuzzer Job Type: libfuzzerasangdaluntrusted Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60e00001775c Crash State: memBitRead...

expat: Use-of-uninitialized-value in lookup

Project: https://github.com/libexpat/libexpat.git Detailed report: https://oss-fuzz.com/testcase?key=5904513653276672 Project: expat Fuzzer: libFuzzerexpatparseUTF16fuzzer Fuzz target binary: parseUTF16fuzzer Job Type: libfuzzermsanexpat Platform Id: linux Crash Type: Use-of-uninitialized-value...

librawspeed: Use-of-uninitialized-value in rawspeed::TiffRootIFD::~TiffRootIFD

Detailed report: https://oss-fuzz.com/testcase?key=5397877767536640 Project: librawspeed Fuzzer: libFuzzerlibrawspeedTiffDecoderFuzzer-SrwDecoder Fuzz target binary: TiffDecoderFuzzer-SrwDecoder Job Type: libfuzzermsanlibrawspeeduntrusted Platform Id: linux Crash Type: Use-of-uninitialized-value...

libreoffice: Container-overflow in HMemIODev::read1b

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=4795817573482496 Project: libreoffice Fuzzer: libFuzzerlibreofficehwpfuzzer Fuzz target binary: hwpfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Container-overflow...

libreoffice: Heap-buffer-overflow in SVBT16ToShort

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5119491576954880 Project: libreoffice Fuzzer: libFuzzerlibreofficeww8fuzzer Fuzz target binary: ww8fuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-buffer-overfl...

Unquoted Service Path Privilege Escalation in ElanTech Touchpad Driver - us

Lenovo Security Advisory: LEN-14390 Potential Impact: Privilege Escalation Severity: Medium Scope of Impact: Industry-Wide CVE Identifier: CVE-2017-3757 Summary Description: An unquoted service path vulnerability was identified in the driver for the ElanTech Touchpad used on some Lenovo brand...

openssl: Heap-buffer-overflow in X509v3_addr_get_afi

Project: https://github.com/openssl/openssl.git Detailed report: https://oss-fuzz.com/testcase?key=4519542728425472 Project: openssl Fuzzer: libFuzzeropensslx509 Fuzz target binary: x509 Job Type: libfuzzerasanopenssl Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

gdal: Heap-buffer-overflow in OGRWAsPLayer::GetNextRawFeature

Detailed report: https://oss-fuzz.com/testcase?key=6010062407467008 Project: gdal Fuzzer: libFuzzergdalwaspfuzzer Fuzz target binary: waspfuzzer Job Type: libfuzzerasangdaluntrusted Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x602000000538 Crash State:...

gnutls: Use-of-uninitialized-value in _wrap_nettle_pk_derive

Project: https://gitlab.com/gnutls/gnutls.git Detailed report: https://oss-fuzz.com/testcase?key=6070070885220352 Project: gnutls Fuzzer: libFuzzergnutlspskclientfuzzer Fuzz target binary: gnutlspskclientfuzzer Job Type: libfuzzermsangnutls Platform Id: linux Crash Type: Use-of-uninitialized-valu...

gnutls: Use-of-uninitialized-value in _nettle_ecc_mod_inv

Project: https://gitlab.com/gnutls/gnutls.git Detailed report: https://oss-fuzz.com/testcase?key=4894226313641984 Project: gnutls Fuzzer: libFuzzergnutlspskclientfuzzer Fuzz target binary: gnutlspskclientfuzzer Job Type: libfuzzermsangnutls Platform Id: linux Crash Type: Use-of-uninitialized-valu...