mupdf:pdf_fuzzer: Use-of-uninitialized-value in fz_round_rect

Project: git://git.ghostscript.com/mupdf.git Detailed Report: https://oss-fuzz.com/testcase?key=5919169136427008 Project: mupdf Fuzzing Engine: libFuzzer Fuzz Target: pdffuzzer Job Type: libfuzzermsanmupdf Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

hdf5:h5_extended_fuzzer: Heap-buffer-overflow in H5O__shared_decode

Detailed Report: https://oss-fuzz.com/testcase?key=5302500718411776 Project: hdf5 Fuzzing Engine: afl Fuzz Target: h5extendedfuzzer Job Type: aflasanhdf5 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x612000027458 Crash State: H5Oshareddecode H5Odtypeshareddecode...

WordPress Participants Database Plugin <= 2.5.5 is vulnerable to Broken Access Control

Software Participants Database Type Plugin Vulnerable versions = 2.5.5 Fixed in 2.5.6 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-48751 Patch priority Medium CVSS severity Medium 4.3 Developer Claim ownership PSID 4e4f72b6b27f Credits Yudistira Arya...

WordPress Happyforms Plugin <= 1.25.9 is vulnerable to Cross Site Scripting (XSS)

Software Happyforms Type Plugin Vulnerable versions = 1.25.9 Fixed in 1.25.10 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-48752 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 31f86188864b Credits Le Ngoc Anh Required privilege...

gdal:gdal_fuzzer: Heap-buffer-overflow in Splash::blitTransparent

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=6127122829410304 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: gdalfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60200002e5f5 Crash...

WordPress Booster for WooCommerce Plugin <= 7.1.1 is vulnerable to Sensitive Data Exposure

Software Booster for WooCommerce Type Plugin Vulnerable versions = 7.1.1 Fixed in 7.1.2 OWASP Top 10 A1: Broken Access Control Classification Sensitive Data Exposure CVE CVE-2023-48333 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID b3744065c2d4 Credits Dave Jong...

WordPress Salient Core Plugin <= 2.0.2 is vulnerable to Cross Site Scripting (XSS)

Software Salient Core Type Plugin Vulnerable versions = 2.0.2 Fixed in 2.0.3 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-48748 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID d4f544ed8ca1 Credits Rafie Muhammad Patchstack Required...

WordPress Community by PeepSo Plugin <= 6.2.6.0 is vulnerable to Cross Site Scripting (XSS)

Software Community by PeepSo Type Plugin Vulnerable versions = 6.2.6.0 Fixed in 6.2.7.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-48746 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 2840ecd15416 Credits Phd Required privilege...

WordPress Booster for WooCommerce Plugin <= 7.1.2 is vulnerable to Content Injection

Software Booster for WooCommerce Type Plugin Vulnerable versions = 7.1.2 Fixed in 7.1.3 OWASP Top 10 A1: Broken Access Control Classification Content Injection CVE CVE-2023-48747 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID f10b42acb401 Credits Dave Jong Patchstac...

pyvex:irsb_fuzzer: Crash in s390_irgen_EXRL

Project: https://github.com/angr/pyvex.git Detailed Report: https://oss-fuzz.com/testcase?key=6400672031178752 Project: pyvex Fuzzing Engine: libFuzzer Fuzz Target: irsbfuzzer Job Type: libfuzzerasanpyvex Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7a2a37cd1fd4 Crash State:...

pcre2:pcre2_fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5792151736549376 Project: pcre2 Fuzzing Engine: libFuzzer Fuzz Target: pcre2fuzzer Job Type: libfuzzerubsanpcre2 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7ffddd1a9ffc Crash State: NULL Sanitizer: undefined UBSAN Recommended...

WordPress Perfmatters Plugin <= 2.1.6 is vulnerable to Cross Site Scripting (XSS)

Software Perfmatters Type Plugin Vulnerable versions = 2.1.6 Fixed in 2.1.7 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-47876 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID e0a42388bb5d Credits Dave Jong Patchstack Required...

WordPress CataBlog Plugin <= 1.7.0 is vulnerable to Arbitrary File Deletion

Software CataBlog Type Plugin Vulnerable versions = 1.7.0 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Arbitrary File Deletion CVE CVE-2023-47843 Patch priority Medium CVSS severity Medium 7.6 Developer Claim ownership PSID 9a8041fb49de Credits Rafie Muhammad Patchstack...

WordPress SearchIQ Plugin <= 4.4 is vulnerable to Broken Access Control

Software SearchIQ Type Plugin Vulnerable versions = 4.4 Fixed in 4.5 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-47832 Patch priority Medium CVSS severity Medium 5.3 Developer Claim ownership PSID ebe24eb2b5d2 Credits Mika Required privilege...

WordPress Events Addon for Elementor Plugin <= 2.1.3 is vulnerable to Broken Access Control

Software Events Addon for Elementor Type Plugin Vulnerable versions = 2.1.3 Fixed in 2.1.4 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-47827 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 5dbac8531308 Credits Abdi Pranata...

pcapplusplus:FuzzTarget: Heap-buffer-overflow in pcpp::TLVRecordReader<pcpp::TcpOption>::getTLVRecord

Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=6211679872221184 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTarget Job Type: libfuzzerasanpcapplusplus Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

WordPress Acme Fix Images Plugin <= 1.0.0 is vulnerable to Broken Access Control

Software Acme Fix Images Type Plugin Vulnerable versions = 1.0.0 Fixed in 2.0.0 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-47793 Patch priority Medium CVSS severity Medium 4.3 Developer Claim ownership PSID 51b5ada66dce Credits Abdi Pranata Required...

WordPress 10WebAnalytics Plugin <= 1.2.12 is vulnerable to Broken Access Control

Software 10WebAnalytics Type Plugin Vulnerable versions = 1.2.12 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-47807 Patch priority Medium CVSS severity Medium 4.3 Developer Claim ownership PSID a7d2ad869475 Credits Abdi Pranata Required...

Intel Graphics Driver Advisory - Lenovo Support US

No description provided...

WordPress AMP+ Plus Plugin <= 3.0 is vulnerable to Cross Site Scripting (XSS)

Software AMP+ Plus Type Plugin Vulnerable versions = 3.0 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-5210 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID dc153061411b Credits Nicolas Surribas Required...