WordPress MetroStore Theme <= 1.3.2 is vulnerable to Broken Access Control

Software MetroStore Type Theme Vulnerable versions = 1.3.2 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-32959 Patch priority Medium CVSS severity Medium 4.3 Developer Claim ownership PSID d697dae9407a Credits Dave Jong Patchstack Required...

WordPress Online eStore Theme <= 1.0.9 is vulnerable to Broken Access Control

Software Online eStore Type Theme Vulnerable versions = 1.0.9 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-32959 Patch priority Medium CVSS severity Medium 4.3 Developer Claim ownership PSID 729988cdbce6 Credits Dave Jong Patchstack Require...

WordPress Kingcabs Theme <= 1.1.6 is vulnerable to Broken Access Control

Software Kingcabs Type Theme Vulnerable versions = 1.1.6 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-32959 Patch priority Medium CVSS severity Medium 4.3 Developer Claim ownership PSID 2d230f2e2cbf Credits Dave Jong Patchstack Required...

libredwg:llvmfuzz: Heap-buffer-overflow in dwg_encode

Detailed Report: https://oss-fuzz.com/testcase?key=4935964991815680 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerasanlibredwg Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x61b000003088 Crash State: dwgencode llvmfuzz.c Sanitize...

mysql-server:fuzz_initfile: Heap-buffer-overflow in my_ismbchar_utf8mb3

Project: https://github.com/mysql/mysql-server.git Detailed Report: https://oss-fuzz.com/testcase?key=5477722185662464 Project: mysql-server Fuzzing Engine: libFuzzer Fuzz Target: fuzzinitfile Job Type: libfuzzerasanmysql-server Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash...

mysql-server:fuzz_initfile: Heap-buffer-overflow in my_strcasecmp_utf8mb3

Project: https://github.com/mysql/mysql-server.git Detailed Report: https://oss-fuzz.com/testcase?key=5452162449408000 Project: mysql-server Fuzzing Engine: libFuzzer Fuzz Target: fuzzinitfile Job Type: libfuzzerasanmysql-server Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash...

assimp:assimp_fuzzer: Bad-cast to Assimp::BaseImporterAssimp::Importer::ReadFile in Assimp::BatchLoader::LoadAll

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=5060182359801856 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerubsanassimp Platform Id: linux Crash Type: Bad-cast Crash Address: 0x000003ae4fe0 Crash State:...

WordPress WPCS Plugin <= 1.1.9 is vulnerable to Broken Access Control

Software WPCS Type Plugin Vulnerable versions = 1.1.9 Fixed in 1.2.0 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-2556 Patch priority Medium CVSS severity Medium 4.3 Developer Claim ownership PSID 05cf802e36e5 Credits Alex Thomas Required privilege...

WordPress Video Gallery Plugin <= 1.0.10 is vulnerable to Cross Site Scripting (XSS)

Software Video Gallery Type Plugin Vulnerable versions = 1.0.10 Fixed in 1.0.11 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-32597 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 30006890509f Credits yuyudhn Required...

vulkan-loader:json_load_fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6229144749604864 Project: vulkan-loader Fuzzing Engine: libFuzzer Fuzz Target: jsonloadfuzzer Job Type: libfuzzerubsanvulkan-loader Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000078101010 Crash State: NULL Sanitizer: undefined...

libredwg:llvmfuzz: Heap-buffer-overflow in json_write_TF

Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=6027934943805440 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerasanlibredwg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

vulkan-loader:json_load_fuzzer: Heap-buffer-overflow in parse_string

Project: https://github.com/khronosgroup/Vulkan-Loader.git Detailed Report: https://oss-fuzz.com/testcase?key=4512865114259456 Project: vulkan-loader Fuzzing Engine: afl Fuzz Target: jsonloadfuzzer Job Type: aflasanvulkan-loader Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash...

WordPress Link Whisper Free Plugin <= 0.6.3 is vulnerable to Broken Access Control

Software Link Whisper Free Type Plugin Vulnerable versions = 0.6.3 Fixed in 0.6.4 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-32506 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID aa6cd8128a6f Credits Nguyen Anh Tien...

hdf5:h5_extended_fuzzer: Crash in H5SL_first

Project: https://github.com/HDFGroup/hdf5.git Detailed Report: https://oss-fuzz.com/testcase?key=4910983987200000 Project: hdf5 Fuzzing Engine: libFuzzer Fuzz Target: h5extendedfuzzer Job Type: libfuzzerubsanhdf5 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000000189fe Crash Stat...

WordPress Advanced Custom Fields Plugin 5.8.10-5.12.5 is vulnerable to Cross Site Scripting (XSS)

Software Advanced Custom Fields Type Plugin Vulnerable versions 5.8.10-5.12.5 Fixed in 5.12.6 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-30777 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 2970573ffd97 Credits Raf...

WordPress Advanced Custom Fields PRO Plugin <= 6.1.5 is vulnerable to Cross Site Scripting (XSS)

Software Advanced Custom Fields PRO Type Plugin Vulnerable versions = 6.1.5 Fixed in 6.1.6 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-30777 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 007d3de805e3 Credits Rafie...

clamav:clamav_dbload_CDB_fuzzer: Memcpy-param-overlap in repeat

Detailed Report: https://oss-fuzz.com/testcase?key=5843158910238720 Project: clamav Fuzzing Engine: libFuzzer Fuzz Target: clamavdbloadCDBfuzzer Job Type: libfuzzerasanclamav Platform Id: linux Crash Type: Memcpy-param-overlap Crash Address: 0x7fcdda1b8860,0x7fcddafcd610 and 0x7fcdd93a3ab8,...

hdf5:h5_extended_fuzzer: Heap-buffer-overflow in H5FS__sect_link

Detailed Report: https://oss-fuzz.com/testcase?key=5452152482168832 Project: hdf5 Fuzzing Engine: afl Fuzz Target: h5extendedfuzzer Job Type: aflasanhdf5 Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x61d000003080 Crash State: H5FSsectlink H5FSsectadd H5MFaddsect...

CVE-2023-2460

Insufficient validation of untrusted input in Extensions in Google Chrome prior to 113.0.5672.63 allowed an attacker who convinced a user to install a malicious extension to bypass file access checks via a crafted HTML page. Chromium security severity: Medium...

CVE-2023-2462

Inappropriate implementation in Prompts in Google Chrome prior to 113.0.5672.63 allowed a remote attacker to obfuscate main origin data via a crafted HTML page. Chromium security severity: Medium...