s2geometry:s2_fuzzer: Use-of-uninitialized-value in std::__1::basic_ostream<char, std::__1::char_traits<char>>& std::__1::__put_char

Project: https://github.com/google/s2geometry.git Detailed Report: https://oss-fuzz.com/testcase?key=5149098832363520 Project: s2geometry Fuzzing Engine: libFuzzer Fuzz Target: s2fuzzer Job Type: libfuzzermsans2geometry Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Cras...

uint256:uint256Fuzz: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5077709748240384 Project: uint256 Fuzzing Engine: libFuzzer Fuzz Target: uint256Fuzz Job Type: libfuzzerasanuint256 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xfffffffffffffff0 Crash State: NULL Sanitizer: address ASAN Recommende...

USN-6718-1: curl vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 22.04 Description Dan Fandrich discovered that curl would incorrectly use the default set of protocols when a parameter option disabled all protocols without adding any, contrary to expectations. This issue only affected...

USN-6697-1: Bash vulnerability | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 22.04 Description It was discovered that Bash incorrectly handled certain memory operations when processing commands. If a user or automated system were tricked into running a specially crafted bash file, a remote attacker...

simdjson:fuzz_dump: Use-of-uninitialized-value in std::__1::basic_ostream<char, std::__1::char_traits<char>>& std::__1::__put_char

Detailed Report: https://oss-fuzz.com/testcase?key=6564074019160064 Project: simdjson Fuzzing Engine: libFuzzer Fuzz Target: fuzzdump Job Type: libfuzzermsansimdjson Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: std::1::basicostream& std::1::putchar printjs...

boringssl:ssl_ctx_api: Use-of-uninitialized-value in ssl_str_to_group_ids

Project: https://boringssl.googlesource.com/boringssl Detailed Report: https://oss-fuzz.com/testcase?key=6200632705875968 Project: boringssl Fuzzing Engine: libFuzzer Fuzz Target: sslctxapi Job Type: libfuzzermsanboringssl Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

gosnmp:fuzz_unmarshal: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6121067329421312 Project: gosnmp Fuzzing Engine: libFuzzer Fuzz Target: fuzzunmarshal Job Type: libfuzzerasangosnmp Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xfffffffffffffff0 Crash State: NULL Sanitizer: address ASAN Recommende...

go-ldap:fuzz_parse_dn: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5123564268224512 Project: go-ldap Fuzzing Engine: libFuzzer Fuzz Target: fuzzparsedn Job Type: libfuzzerasango-ldap Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xfffffffffffffff0 Crash State: NULL Sanitizer: address ASAN Recommende...

cras:cras_fl_media_fuzzer: Use-of-uninitialized-value in validate_bluetooth_device_address

Detailed Report: https://oss-fuzz.com/testcase?key=6559408940187648 Project: cras Fuzzing Engine: libFuzzer Fuzz Target: crasflmediafuzzer Job Type: libfuzzermsancras Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: validatebluetoothdeviceaddress...

wabt:read_binary_interp_fuzzer: Use-of-uninitialized-value in wabt::TypeChecker::PrintStackIfFailedV

Project: https://github.com/WebAssembly/wabt.git Detailed Report: https://oss-fuzz.com/testcase?key=5774845552951296 Project: wabt Fuzzing Engine: libFuzzer Fuzz Target: readbinaryinterpfuzzer Job Type: libfuzzermsanwabt Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Cra...

WordPress Print Barcode Labels for your WooCommerce products/orders Plugin <= 3.4.6 is vulnerable to Broken Access Control

Software Print Barcode Labels for your WooCommerce products/orders Type Plugin Vulnerable versions = 3.4.6 Fixed in 3.4.7 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-1677 Patch priority Medium CVSS severity Medium 6.3 Developer Claim ownership PSID...

WordPress Photo Gallery – Responsive Photo Gallery Plugin <= 1.4.2 is vulnerable to PHP Object Injection

Software Photo Gallery – Responsive Photo Gallery Type Plugin Vulnerable versions = 1.4.2 Fixed in 1.4.3 OWASP Top 10 A1: Injection Classification PHP Object Injection CVE CVE-2024-1896 Patch priority Medium CVSS severity Medium 6.4 Developer Claim ownership PSID 9cc31de9b6ad Credits Francesco...

WordPress AA Cash Calculator Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)

Software AA Cash Calculator Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-0848 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 0f4d37bdc2c4 Credits Nathaniel Oh 0x4n3...

WordPress JW Player for WordPress Plugin <= 2.3.3 is vulnerable to Broken Access Control

Software JW Player for WordPress Type Plugin Vulnerable versions = 2.3.3 Fixed in 2.3.4 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-33931 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 9246d67d86c5 Credits Mika Required...

WordPress Tutor LMS Plugin <= 2.6.2 is vulnerable to Broken Access Control

Software Tutor LMS Type Plugin Vulnerable versions = 2.6.2 Fixed in 2.7.0 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-3553 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 834bc3c614b6 Credits M.Awad Required privilege...

WordPress WP ULike Plugin <= 4.6.9 is vulnerable to Cross Site Scripting (XSS)

Software WP ULike Type Plugin Vulnerable versions = 4.6.9 Fixed in 4.7.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-1759 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID db48c23d8083 Credits stealthcopter Required...

WordPress SP Project & Document Manager Plugin <= 4.69 is vulnerable to Broken Access Control

Software SP Project & Document Manager Type Plugin Vulnerable versions = 4.69 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-33923 Patch priority Medium CVSS severity Medium 6.3 Developer Claim ownership PSID 4ab90a9cecb9 Credits Abdi Pranata...

inchi:inchi_input_fuzzer: Crash in OrigAtData_RemoveHalfBond

Detailed Report: https://oss-fuzz.com/testcase?key=4973535534579712 Project: inchi Fuzzing Engine: libFuzzer Fuzz Target: inchiinputfuzzer Job Type: libfuzzerasaninchi Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x61a00007c9ec Crash State: OrigAtDataRemoveHalfBond...

inchi:inchi_input_fuzzer: Heap-buffer-overflow in OAD_Polymer_CompareRanksOfTwoAtoms

Project: https://github.com/IUPAC-InChI/InChI.git Detailed Report: https://oss-fuzz.com/testcase?key=5189499844886528 Project: inchi Fuzzing Engine: afl Fuzz Target: inchiinputfuzzer Job Type: aflasaninchi Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x60700000047c...

WordPress XStore Theme <= 9.3.8 is vulnerable to Cross Site Scripting (XSS)

Software XStore Type Theme Vulnerable versions = 9.3.8 Fixed in 9.3.9 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-33562 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 5d1626b7824f Credits Rafie Muhammad Patchstack Required privile...