WordPress Smart Logo Showcase Lite Plugin <= 1.1.9 is vulnerable to Cross Site Scripting (XSS)

Software Smart Logo Showcase Lite Type Plugin Vulnerable versions = 1.1.9 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-0175 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 946d9d91d290 Credits Lana Codes...

libdwarf:fuzz_gdbindex: Heap-buffer-overflow in dwarf_gdbindex_cuvector_inner_attributes

Project: https://github.com/davea42/libdwarf-code.git Detailed Report: https://oss-fuzz.com/testcase?key=5240324382654464 Project: libdwarf Fuzzing Engine: libFuzzer Fuzz Target: fuzzgdbindex Job Type: libfuzzerasanlibdwarf Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

libdwarf:fuzz_die_cu_offset: Stack-buffer-overflow in dwarf_get_version_of_die

Project: https://github.com/davea42/libdwarf-code.git Detailed Report: https://oss-fuzz.com/testcase?key=5171954224332800 Project: libdwarf Fuzzing Engine: honggfuzz Fuzz Target: fuzzdiecuoffset Job Type: honggfuzzasanlibdwarf Platform Id: linux Crash Type: Stack-buffer-overflow READ 8 Crash...

libdwarf:fuzz_dnames: Crash in dwarf_dealloc_dnames

Project: https://github.com/davea42/libdwarf-code.git Detailed Report: https://oss-fuzz.com/testcase?key=4784811358420992 Project: libdwarf Fuzzing Engine: libFuzzer Fuzz Target: fuzzdnames Job Type: libfuzzerasanlibdwarf Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000001000...

WordPress Galleries by Angie Makes Plugin <= 1.67 is vulnerable to Cross Site Scripting (XSS)

Software Galleries by Angie Makes Type Plugin Vulnerable versions = 1.67 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2022-4795 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID c4b62d67a4b8 Credits Lana Codes...

WordPress VK All in One Expansion Unit Plugin < 9.86.0.0 is vulnerable to Cross Site Scripting (XSS)

Software VK All in One Expansion Unit Type Plugin Vulnerable versions 9.86.0.0 Fixed in 9.86.0.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-0230 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID ada9adbd1470 Credits...

WordPress Donation Block For PayPal Plugin < 2.1.0 is vulnerable to Cross Site Scripting (XSS)

Software Donation Block For PayPal Type Plugin Vulnerable versions 2.1.0 Fixed in 2.1.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-0535 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID b8d846d35c7d Credits Lana Codes...

hdf5:h5_read_fuzzer: Heap-buffer-overflow in H5F_get_checksums

Detailed Report: https://oss-fuzz.com/testcase?key=5777701631033344 Project: hdf5 Fuzzing Engine: afl Fuzz Target: h5readfuzzer Job Type: aflasanhdf5 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6020000039cf Crash State: H5Fgetchecksums H5Ocacheverifychksum H5Cprote...

libreoffice:htmlfuzzer: Heap-buffer-overflow in setSvxBrushItemAsFillAttributesToTargetSet

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=4511695344369664 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: htmlfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash...

flac:fuzzer_tool_flac: Use-of-uninitialized-value in EncoderSession_finish_ok

Project: https://github.com/xiph/flac.git Detailed Report: https://oss-fuzz.com/testcase?key=4696183735189504 Project: flac Fuzzing Engine: libFuzzer Fuzz Target: fuzzertoolflac Job Type: libfuzzermsanflac Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

USN-5849-1: Heimdal vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 16.04 Canonical Ubuntu 18.04 Description Helmut Grohne discovered that Heimdal GSSAPI incorrectly handled logical conditions that are related to memory management operations. An attacker could possibly use this issue to...

WordPress Drag and Drop Multiple File Upload for WooCommerce Plugin <= 1.0.8 is vulnerable to Multiple Vulnerabilities

Software Drag and Drop Multiple File Upload for WooCommerce Type Plugin Vulnerable versions = 1.0.8 Fixed in 1.0.9 OWASP Top 10 A5: Broken Access Control Classification Multiple Vulnerabilities CVE CVE-2022-45377 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID...

WordPress Conditional Checkout Fields for WooCommerce Plugin <= 1.2.3 is vulnerable to Broken Authentication

Software Conditional Checkout Fields for WooCommerce Type Plugin Vulnerable versions = 1.2.3 Fixed in 1.2.4 OWASP Top 10 A2: Broken Authentication Classification Broken Authentication CVE CVE-2022-45070 Patch priority Medium CVSS severity Medium 5.3 Developer Claim ownership PSID cc94411347cb...

USN-5810-1: Git vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 18.04 Canonical Ubuntu 22.04 Description Markus Vervier and Eric Sesterhenn discovered that Git incorrectly handled certain gitattributes. An attacker could possibly use this issue to cause a crash or execute arbitrary cod...

CVE-2023-0933

Integer overflow in PDF in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. Chromium security severity: Medium...

Integer overflow

Integer overflow in PDF in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. Chromium security severity: Medium...

CVE-2023-0933

Integer overflow in PDF in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. Chromium security severity: Medium...

CVE-2023-0933

Integer overflow in PDF in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. Chromium security severity: Medium...

opensc:fuzz_pkcs15init: Heap-buffer-overflow in sc_hsm_write_ef

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=5938782114545664 Project: opensc Fuzzing Engine: libFuzzer Fuzz Target: fuzzpkcs15init Job Type: libfuzzerasanopensc Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

WordPress Login Logout Menu Plugin <= 1.3.3 is vulnerable to Cross Site Scripting (XSS)

Software Login Logout Menu Type Plugin Vulnerable versions = 1.3.3 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2022-4622 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 93394eba834d Credits Lana Codes Require...