5930 matches found
trafficserver:fuzz_hpack: Use-of-uninitialized-value in XpackDynamicTable::_make_space
Project: https://github.com/apache/trafficserver.git Detailed Report: https://oss-fuzz.com/testcase?key=6285050312196096 Project: trafficserver Fuzzing Engine: libFuzzer Fuzz Target: fuzzhpack Job Type: libfuzzermsantrafficserver Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...
WordPress EventON Pro Plugin < 4.4.1 is vulnerable to Cross Site Scripting (XSS)
Software EventON Pro Type Plugin Vulnerable versions 4.4.1 Fixed in 4.4.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-7200 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID f88412538f0b Credits kauenavarro Required...
PT-2024-37896
Name of the Vulnerable Software and Affected Versions Grafana affected versions not specified Description A medium severity security fix has been released for Grafana. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability...
GLSA-202401-34 : Chromium, Google Chrome, Microsoft Edge: Multiple Vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202401-34 Chromium, Google Chrome, Microsoft Edge: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in Chromium and its derivatives. Please review the CVE identifiers referenced below for details. Tenable has...
WordPress Order Delivery Date for WP e-Commerce Plugin <= 1.2 is vulnerable to Cross Site Scripting (XSS)
Software Order Delivery Date for WP e-Commerce Type Plugin Vulnerable versions = 1.2 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-0678 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 9f553bdb479d Credits...
freeradius:fuzzer_dhcpv6: Heap-buffer-overflow in decode_rfc
Detailed Report: https://oss-fuzz.com/testcase?key=4841974653845504 Project: freeradius Fuzzing Engine: libFuzzer Fuzz Target: fuzzerdhcpv6 Job Type: libfuzzerasanfreeradius Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6020000000c1 Crash State: decoderfc...
sqlite3:ossfuzz: Use-of-uninitialized-value in jsonTranslateBlobToText
Detailed Report: https://oss-fuzz.com/testcase?key=5692622052065280 Project: sqlite3 Fuzzing Engine: libFuzzer Fuzz Target: ossfuzz Job Type: libfuzzermsansqlite3 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: jsonTranslateBlobToText jsonExtractFunc...
WordPress Instant Images Plugin <= 6.1.0 is vulnerable to Broken Access Control
Software Instant Images Type Plugin Vulnerable versions = 6.1.0 Fixed in 6.1.1 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-0869 Patch priority Medium CVSS severity Medium 8.8 Developer Claim ownership PSID 5f84c56450a0 Credits Sean Murphy Required...
imagemagick:encoder_psd_fuzzer: Use-of-uninitialized-value in CompositeOverImage
Detailed Report: https://oss-fuzz.com/testcase?key=6012197348114432 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderpsdfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: CompositeOverImage CompositeIma...
CVE-2024-0814
Incorrect security UI in Payments in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially spoof security UI via a crafted HTML page. Chromium security severity: Medium...
CVE-2024-0805
Inappropriate implementation in Downloads in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to perform domain spoofing via a crafted domain name. Chromium security severity: Medium...
CVE-2024-0805
Inappropriate implementation in Downloads in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to perform domain spoofing via a crafted domain name. Chromium security severity: Medium...
Information disclosure
Inappropriate implementation in Downloads in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to perform domain spoofing via a crafted domain name. Chromium security severity: Medium...
Design/Logic Flaw
Incorrect security UI in Payments in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially spoof security UI via a crafted HTML page. Chromium security severity: Medium...
Design/Logic Flaw
Use after free in Passwords in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit heap corruption via specific UI interaction. Chromium security severity: Medium...
Google Chrome < 121.0.6167.85 Multiple Vulnerabilities
The version of Google Chrome installed on the remote Windows host is prior to 121.0.6167.85. It is, therefore, affected by multiple vulnerabilities as referenced in the 202401stable-channel-update-for-desktop23 advisory. - Use after free in Reading Mode in Google Chrome prior to 121.0.6167.85...
Google Chrome < 121.0.6167.85 Multiple Vulnerabilities
The version of Google Chrome installed on the remote macOS host is prior to 121.0.6167.85. It is, therefore, affected by multiple vulnerabilities as referenced in the 202401stable-channel-update-for-desktop23 advisory. - Use after free in Reading Mode in Google Chrome prior to 121.0.6167.85 allow...
WordPress WP Customer Area Plugin <= 8.2.2 is vulnerable to Cross Site Scripting (XSS)
Software WP Customer Area Type Plugin Vulnerable versions = 8.2.2 Fixed in 8.2.3 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-0665 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID f88bc5bdc8b9 Credits Krzysztof Zając...
CVE-2024-0806
Use after free in Passwords in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit heap corruption via specific UI interaction. Chromium security severity: Medium...