CVE-2023-4905

Inappropriate implementation in Prompts in Google Chrome prior to 117.0.5938.62 allowed a remote attacker to spoof security UI via a crafted HTML page. Chromium security severity: Medium...

CVE-2023-4901

CVE-2023-4901 affects Google Chrome/Chromium: an improper Prompts implementation prior to Chrome 117.0.5938.62 allowed a remote attacker to potentially spoof security UI via a crafted HTML page. Impact is Medium (CVSS 3.1: AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N; base score 4.3). Affected products in...

CVE-2023-4900

CVE-2023-4900 affects Google Chrome/Chromium family (Android Chrome prior to 117.0.5938.62) where an inappropriate implementation in Custom Tabs allows a remote attacker to obfuscate a permission prompt via a crafted HTML page. Connected advisories indicate this is one of multiple Chromium issues...

CVE-2023-4903

CVE-2023-4903 concerns Google Chrome on Android before 117.0.5938.62, where Inappropriate implementation in Custom Mobile Tabs allowed a remote attacker to spoof security UI via a crafted HTML page. The linked sources confirm this is a Chromium-derived issue affecting Chrome/Chromium and related ...

CVE-2023-4903

Inappropriate implementation in Custom Mobile Tabs in Google Chrome on Android prior to 117.0.5938.62 allowed a remote attacker to spoof security UI via a crafted HTML page. Chromium security severity: Medium...

CVE-2023-4900

Inappropriate implementation in Custom Tabs in Google Chrome on Android prior to 117.0.5938.62 allowed a remote attacker to obfuscate a permission prompt via a crafted HTML page. Chromium security severity: Medium...

CVE-2023-4901

Inappropriate implementation in Prompts in Google Chrome prior to 117.0.5938.62 allowed a remote attacker to potentially spoof security UI via a crafted HTML page. Chromium security severity: Medium...

CVE-2023-4900

Inappropriate implementation in Custom Tabs in Google Chrome on Android prior to 117.0.5938.62 allowed a remote attacker to obfuscate a permission prompt via a crafted HTML page. Chromium security severity: Medium...

CVE-2023-4903

Inappropriate implementation in Custom Mobile Tabs in Google Chrome on Android prior to 117.0.5938.62 allowed a remote attacker to spoof security UI via a crafted HTML page. Chromium security severity: Medium...

CVE-2023-4902

Inappropriate implementation in Input in Google Chrome prior to 117.0.5938.62 allowed a remote attacker to spoof security UI via a crafted HTML page. Chromium security severity: Medium...

htslib:hts_open_fuzzer: Heap-buffer-overflow in uint7_get_64

Project: https://github.com/samtools/htslib.git Detailed Report: https://oss-fuzz.com/testcase?key=5097832530706432 Project: htslib Fuzzing Engine: honggfuzz Fuzz Target: htsopenfuzzer Job Type: honggfuzzasanhtslib Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

Medium: gcc10

Issue Overview: An issue was found in a defense in depth feature of the GCC compiler on aarch64 platforms. The stack protector feature -fstack-protector did not detect or defend against overflows of dynamically-sized local variables. This update to the GCC compiler remedies code generation for th...

WordPress WoodMart Theme <= 7.2.4 is vulnerable to Cross Site Scripting (XSS)

Software WoodMart Type Theme Vulnerable versions = 7.2.4 Fixed in 7.2.5 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-41872 Patch priority Medium CVSS severity Medium 7.1 Developer Xtemos PSID 563c6cf0394d Credits Rafie Muhammad Patchstack Required privilege...

WordPress Poll Maker Plugin <= 4.7.0 is vulnerable to Cross Site Scripting (XSS)

Software Poll Maker Type Plugin Vulnerable versions = 4.7.0 Fixed in 4.7.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-41871 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID fe5a513df2c9 Credits Le Ngoc Anh Required privilege...

WordPress Wishful Blog Theme <= 2.0.1 is vulnerable to Cross Site Scripting (XSS)

Software Wishful Blog Type Theme Vulnerable versions = 2.0.1 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-28621 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID aead8e265572 Credits László Radnai Required...

WordPress Tilda Publishing Plugin <= 0.3.23 is vulnerable to Broken Access Control

Software Tilda Publishing Type Plugin Vulnerable versions = 0.3.23 Fixed in 0.3.24 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-31234 Patch priority Medium CVSS severity Medium 6.3 Developer Claim ownership PSID f643ff3b43ab Credits spacecroupier Requir...

g-auth-library-java:TokenVerifierFuzzer: Security exception in com.code_intelligence.jazzer.sanitizers.ServerSideRequestForgery.checkSsrf

Detailed Report: https://oss-fuzz.com/testcase?key=4975037751623680 Project: g-auth-library-java Fuzzing Engine: libFuzzer Fuzz Target: TokenVerifierFuzzer Job Type: libfuzzerasang-auth-library-java Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

WordPress Ovic Product Bundle Plugin <= 1.1.2 is vulnerable to Broken Access Control

Software Ovic Product Bundle Type Plugin Vulnerable versions = 1.1.2 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-41649 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 75cf7d8a70bd Credits thiennv Required...

WordPress Easy Newsletter Signups Plugin <= 1.0.4 is vulnerable to Broken Access Control

Software Easy Newsletter Signups Type Plugin Vulnerable versions = 1.0.4 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-41664 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 31ca0e95e8ca Credits Emili Castells...

ndpi:fuzz_process_packet: Heap-buffer-overflow in ndpi_domain_classify_contains

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5440735166726144 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzprocesspacket Job Type: libfuzzerasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x6040000000bd...