USN-5923-1: LibTIFF vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 16.04 Canonical Ubuntu 18.04 Canonical Ubuntu 22.04 Description It was discovered that LibTIFF could be made to read out of bounds when processing certain malformed image files with the tiffcrop tool. If a user were tricke...

hdf5:h5_extended_fuzzer: Heap-buffer-overflow in H5G__node_cmp3

Project: https://github.com/HDFGroup/hdf5.git Detailed Report: https://oss-fuzz.com/testcase?key=5200578618982400 Project: hdf5 Fuzzing Engine: libFuzzer Fuzz Target: h5extendedfuzzer Job Type: libfuzzerasanhdf5 Platform Id: linux Crash Type: Heap-buffer-overflow READ 5 Crash Address:...

WordPress Branded Social Images Plugin <= 1.1.0 is vulnerable to Broken Access Control

Software Branded Social Images Type Plugin Vulnerable versions = 1.1.0 Fixed in 1.1.1 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-28536 Patch priority Medium CVSS severity Medium 5.3 Developer Claim ownership PSID d288421a23b1 Credits Yuki Haruma...

assimp:assimp_fuzzer: Crash in Assimp::SMDImporter::ParseNodeInfo

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=4879958521806848 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerasanassimp Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x6267fffffff8 Crash State...

WordPress WP Job Portal Plugin <= 2.0.5 is vulnerable to Cross Site Scripting (XSS)

Software WP Job Portal Type Plugin Vulnerable versions = 2.0.5 Fixed in 2.0.6 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-28534 Patch priority Medium CVSS severity Medium 6.5 Developer Ahmad PSID e68a92571619 Credits Fariq Fadillah Gusti Insani...

Wordfence Intelligence Weekly WordPress Vulnerability Report (Mar 6, 2023 to Mar 12, 2023)

Last week, there were 60 vulnerabilities disclosed in 40 WordPress Plugins and 1 WordPress theme that have been added to the Wordfence Intelligence Vulnerability Database, and there were 16 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabilities in...

gopacket:fuzz_layers: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4736798028070912 Project: gopacket Fuzzing Engine: libFuzzer Fuzz Target: fuzzlayers Job Type: libfuzzerasangopacket Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000015b8141f Crash State: NULL Sanitizer: address ASAN Recommended...

wasm3:fuzzer: Index-out-of-bounds in Compile_CallIndirect

Project: https://github.com/wasm3/wasm3.git Detailed Report: https://oss-fuzz.com/testcase?key=6110620476112896 Project: wasm3 Fuzzing Engine: libFuzzer Fuzz Target: fuzzer Job Type: libfuzzerubsanwasm3 Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

WordPress Backup Bank: WordPress Backup Plugin Plugin <= 4.0.28 is vulnerable to Broken Access Control

Software Backup Bank: WordPress Backup Plugin Type Plugin Vulnerable versions = 4.0.28 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-28165 Patch priority Medium CVSS severity Medium 4.3 Developer Claim ownership PSID 1712eef4d84c Credits...

WordPress Chankhe Theme <= 1.0.5 is vulnerable to Broken Authentication

Software Chankhe Type Theme Vulnerable versions = 1.0.5 Fixed in N/A OWASP Top 10 A2: Broken Authentication Classification Broken Authentication CVE CVE-2023-28416 Patch priority Medium CVSS severity Medium 4.3 Developer Claim ownership PSID 9050e7df6a1b Credits Dave Jong Patchstack Required...

mruby:mruby_fuzzer: Crash in mrb_obj_iv_get

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=5002825288777728 Project: mruby Fuzzing Engine: libFuzzer Fuzz Target: mrubyfuzzer Job Type: libfuzzerasanmruby Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000032030 Crash State:...

Advisory ROSA-SA-2023-2132

Software: pesign 0.109 OS: rosa-server79 packageevrstring: pesign-0.109-11 CVE-ID: CVE-2022-3560 BDU-ID: None CVE-Crit: MEDIUM CVE-DESC: A flaw has been found in the design. The pesign package provides a systemd service used to run the pesign daemon. This service module runs a script to set ACLs...

mosquitto:broker_fuzz_test_config: Heap-buffer-overflow in mosquitto__strdup

Project: https://github.com/eclipse/mosquitto.git Detailed Report: https://oss-fuzz.com/testcase?key=4715061584461824 Project: mosquitto Fuzzing Engine: libFuzzer Fuzz Target: brokerfuzztestconfig Job Type: libfuzzerasanmosquitto Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash...

WordPress Brilliance Theme <= 1.3.1 is vulnerable to Cross Site Scripting (XSS)

Software Brilliance Type Theme Vulnerable versions = 1.3.1 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-28171 Patch priority Medium CVSS severity Medium 5.4 Developer Claim ownership PSID 3d9a1effb3cc Credits Dave Jong Patchstack...

libredwg:llvmfuzz: Heap-buffer-overflow in dwg_decode_LWPOLYLINE_private

Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=5561541119574016 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerasanlibredwg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

binutils:fuzz_objdump: Memcpy-param-overlap in dump_bfd

Detailed Report: https://oss-fuzz.com/testcase?key=5971849797566464 Project: binutils Fuzzing Engine: afl Fuzz Target: fuzzobjdump Job Type: aflasanbinutils Platform Id: linux Crash Type: Memcpy-param-overlap Crash Address: 0x626000009100,0x6260000090f8 and 0x000000000000, 0xfffffffffffffff8 Cras...

libmpeg2:mpeg2_dec_fuzzer: Heap-buffer-overflow in impeg2d_dec_1mv

Project: https://android.googlesource.com/platform/external/libmpeg2 https://github.com/ittiam-systems/libmpeg2.git Detailed Report: https://oss-fuzz.com/testcase?key=5142693442617344 Project: libmpeg2 Fuzzing Engine: libFuzzer Fuzz Target: mpeg2decfuzzer Job Type: libfuzzerasanlibmpeg2 Platform...

libdwarf:fuzz_macro_dwarf5: Heap-buffer-overflow in _dwarf_create_a_new_cu_context_record_on_list

Project: https://github.com/davea42/libdwarf-code.git Detailed Report: https://oss-fuzz.com/testcase?key=5080340952907776 Project: libdwarf Fuzzing Engine: libFuzzer Fuzz Target: fuzzmacrodwarf5 Job Type: libfuzzerasanlibdwarf Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash...

mruby:mruby_fuzzer: Use-of-uninitialized-value in mrb_obj_iv_set_force

Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=4698611440287744 Project: mruby Fuzzing Engine: libFuzzer Fuzz Target: mrubyfuzzer Job Type: libfuzzermsanmruby Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

SUSE CVE-2023-1223

Insufficient policy enforcement in Autofill in Google Chrome on Android prior to 111.0.5563.64 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...