sqlite3:ossfuzz: Use-of-uninitialized-value in sqlite3VdbeChangeEncoding

Detailed Report: https://oss-fuzz.com/testcase?key=5747350217293824 Project: sqlite3 Fuzzing Engine: libFuzzer Fuzz Target: ossfuzz Job Type: libfuzzermsansqlite3 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: sqlite3VdbeChangeEncoding sqlite3VdbeExec...

Royale Event Management System 1.0 Cross Site Scripting

Exploit Title: Royale Event Management System 1.0 - Cross-site Scripting Stored unauthenticated Date: 17/03/2022 Exploit Author: Mr Empy Software Link: https://www.sourcecodester.com/php/15225/church-management-software-free-download-full-version.html Version: 1.0 Tested on: Linux Title:...

circl:cryptofuzz: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5253282677784576 Project: circl Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz Job Type: libfuzzerasancircl Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000008028 Crash State: NULL Sanitizer: address ASAN Recommended Securit...

CVE-2021-3422

The lack of validation of a key-value field in the Splunk-to-Splunk protocol results in a denial-of-service in Splunk Enterprise instances configured to index Universal Forwarder traffic. The vulnerability impacts Splunk Enterprise versions before 7.3.9, 8.0 versions before 8.0.9, and 8.1 version...

opensc:fuzz_pkcs15init: Heap-buffer-overflow in epassNUMBER_hook_path

Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=6472192584450048 Project: opensc Fuzzing Engine: afl Fuzz Target: fuzzpkcs15init Job Type: aflasanopensc Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x61500000147e Crash...

Funds are transferred to saleRecipient before settlement

This issue has been created to subdivide a multi-part submission to a single, medium severity finding. See issue 50 and in particular, judge @0xleastwood's comment here. --- The text was updated successfully, but these errors were encountered: All reactions...

libjxl:djxl_fuzzer: Heap-buffer-overflow in jxl::WriteToPixelCallbackStage::ProcessRow

Project: https://github.com/libjxl/libjxl.git Detailed Report: https://oss-fuzz.com/testcase?key=5189497920290816 Project: libjxl Fuzzing Engine: libFuzzer Fuzz Target: djxlfuzzer Job Type: libfuzzerasanlibjxl Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x621000045d0...

llvm:clang-objc-fuzzer: Use-of-uninitialized-value in clang::Lexer::getTokenPrefixLength

Detailed Report: https://oss-fuzz.com/testcase?key=4917536873906176 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: clang-objc-fuzzer Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: clang::Lexer::getTokenPrefixLength...

elfutils:fuzz-libdwfl: Use-of-uninitialized-value in find_debuginfo_in_path

Detailed Report: https://oss-fuzz.com/testcase?key=5859104961200128 Project: elfutils Fuzzing Engine: libFuzzer Fuzz Target: fuzz-libdwfl Job Type: libfuzzermsanelfutils Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: finddebuginfoinpath...

elfutils:fuzz-libelf: Use-of-uninitialized-value in validate_str

Detailed Report: https://oss-fuzz.com/testcase?key=5658767587409920 Project: elfutils Fuzzing Engine: libFuzzer Fuzz Target: fuzz-libelf Job Type: libfuzzermsanelfutils Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: validatestr elfstrptr fuzzlogicone...

freeradius:fuzzer_dhcpv4: Heap-buffer-overflow in __covrec_1D46B478ANUMBER

Detailed Report: https://oss-fuzz.com/testcase?key=6711548259729408 Project: freeradius Fuzzing Engine: libFuzzer Fuzz Target: fuzzerdhcpv4 Job Type: libfuzzerasanfreeradius Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x611000001177 Crash State: covrec1D46B478ANUMBER...

USN-5247-1: Vim vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 18.04 Description It was discovered that vim incorrectly handled parsing of filenames in its search functionality. If a user was tricked into opening a specially crafted file, an attacker could crash the application, leadi...

WordPress 5.9.2 Security Update Fixes XSS and Prototype Pollution Vulnerabilities

Last night, just after 6pm Pacific time, on Thursday March 10, 2022, the WordPress core team released WordPress version 5.9.2, which contains security patches for a high-severity vulnerability as well as two medium-severity issues. The high-severity issue affects version 5.9.0 and 5.9.1 and allow...

php:php-fuzz-execute: Heap-buffer-overflow in zend_gc_collect_cycles

Detailed Report: https://oss-fuzz.com/testcase?key=6096176166862848 Project: php Fuzzing Engine: honggfuzz Fuzz Target: php-fuzz-execute Job Type: honggfuzzasanphp Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x7fd1cbbfb810 Crash State: zendgccollectcycles...

libxslt:xslt: Use-of-uninitialized-value in xmlStrcat

Project: https://gitlab.gnome.org/GNOME/libxslt.git Detailed Report: https://oss-fuzz.com/testcase?key=5393763441180672 Project: libxslt Fuzzing Engine: libFuzzer Fuzz Target: xslt Job Type: libfuzzermsanlibxslt Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

libxslt:xslt: Use-of-uninitialized-value in xmlDictLookup

Project: https://gitlab.gnome.org/GNOME/libxslt.git Detailed Report: https://oss-fuzz.com/testcase?key=4741482278420480 Project: libxslt Fuzzing Engine: libFuzzer Fuzz Target: xslt Job Type: libfuzzermsanlibxslt Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

Wrong implementation of OperatorResolver::areOperatorsImported

This issue has been created to upgrade a QA report submission to a medium severity finding. From kenzo: Wrong implementation of OperatorResolver::areOperatorsImported The function as implemented will return true if the operators have same implementation but different selector, or different...

Check if a value is in an array before a push

This issue has been created to upgrade a QA report submission to a medium severity finding. From Dravee: Check if a value is in an array before a push In NestedRecords.sol's store function, it's possible to push an existing address token several times in the same array File: NestedRecords.sol 130...

function rebuildCache() in MixinOperatorResolver does not delete removed operators from operatorCache

This issue has been created to upgrade a QA report submission to a medium severity finding. From pauliax: function rebuildCache in MixinOperatorResolver does not delete removed operators from operatorCache. resolverOperatorsRequired return current active operators, so it will not contain removed...

areOperatorsImported has incorrect logic

This issue has been created to upgrade a QA report submission to a medium severity finding. From 0xliumin: areOperatorsImported has incorrect logic Right now, this function returns false if the implementation AND the selector don't match. It's possible to provide a destination with either a...