matio:matio_fuzzer: Crash in unsigned long fuzzer::ForEachNonZeroByte<unsigned long fuzzer::TracePC::CollectF

Detailed Report: https://oss-fuzz.com/testcase?key=5664857916047360 Project: matio Fuzzing Engine: libFuzzer Fuzz Target: matiofuzzer Job Type: libfuzzerubsanmatio Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x3fe870131f28 Crash State: unsigned long fuzzer::ForEachNonZeroByteunsign...

libucl:ucl_add_string_fuzzer: Crash in ucl_skip_comments

Detailed Report: https://oss-fuzz.com/testcase?key=5199900325838848 Project: libucl Fuzzing Engine: libFuzzer Fuzz Target: ucladdstringfuzzer Job Type: libfuzzerubsanlibucl Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f105e615000 Crash State: uclskipcomments uclstatemachine...

php:php-fuzz-exif: Heap-buffer-overflow in _estrdup

Detailed Report: https://oss-fuzz.com/testcase?key=6202813475061760 Project: php Fuzzing Engine: afl Fuzz Target: php-fuzz-exif Job Type: aflasanphp Platform Id: linux Crash Type: Heap-buffer-overflow READ 15 Crash Address: 0x6060000a1bde Crash State: estrdup exifprocessusercomment...

graphicsmagick:coder_MAT_fuzzer: Use-of-uninitialized-value in ImportViewPixelArea

Detailed Report: https://oss-fuzz.com/testcase?key=6147169237729280 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderMATfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: ImportViewPixelArea...

NetApp Clustered Data ONTAP Vulnerabilities - Lenovo Support US

No description provided...

GHSA-3J9M-HCV9-RPJ8 XSS vulnerability allowing arbitrary JavaScript execution

Today we are releasing Grafana 8.2.3. This patch release includes an important security fix for an issue that affects all Grafana versions from 8.0.0-beta1. Grafana Cloud instances have already been patched and an audit did not find any usage of this attack vector. Grafana Enterprise customers we...

pulumi:schema_fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5392529390960640 Project: pulumi Fuzzing Engine: libFuzzer Fuzz Target: schemafuzzer Job Type: libfuzzerasanpulumi Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000002180 Crash State: NULL Sanitizer: address ASAN Recommended...

libbpf:bpf-object-fuzzer: Heap-buffer-overflow in bpf_object__section_to_libbpf_map_type

Detailed Report: https://oss-fuzz.com/testcase?key=4819294802804736 Project: libbpf Fuzzing Engine: afl Fuzz Target: bpf-object-fuzzer Job Type: aflasanlibbpf Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x6140000df8c8 Crash State: bpfobjectsectiontolibbpfmaptype...

bitcoin-core:str_printf: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4947614315970560 Project: bitcoin-core Fuzzing Engine: libFuzzer Fuzz Target: strprintf Job Type: libfuzzerasani386bitcoin-core Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x39383037 Crash State: NULL Sanitizer: address ASAN...

freetype2:truetype: Heap-buffer-overflow in tt_face_vary_cvt

Detailed Report: https://oss-fuzz.com/testcase?key=5649991339737088 Project: freetype2 Fuzzing Engine: afl Fuzz Target: truetype Job Type: aflasanfreetype2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x602000000cb8 Crash State: ttfacevarycvt ttfaceloadcvt ttsetmmblen...

libvips:jpegsave_buffer_fuzzer: Heap-buffer-overflow in exif_get_short

Project: https://github.com/libvips/libvips.git Detailed Report: https://oss-fuzz.com/testcase?key=5922208833208320 Project: libvips Fuzzing Engine: libFuzzer Fuzz Target: jpegsavebufferfuzzer Job Type: libfuzzerasanlibvips Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

Cloudflare Public Bug Bounty: Bypassing Cache Deception Armor using .avif extension file

Cloudflare Deception Armor could be bypassed by using .avif extension making Cache deception attack possible on vulnerable origin servers. Cloudflare Cache Deception Armor uses a Page rule to protect Cloudflare Cache against caching possibly sensitive information. This attack could be performed b...

runc:configs_fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5216543441551360 Project: runc Fuzzing Engine: libFuzzer Fuzz Target: configsfuzzer Job Type: libfuzzerasanrunc Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00000e877223 Crash State: NULL Sanitizer: address ASAN Recommended Securi...

My Movie Collection Sinatra App Movie Cross Site Scripting

Document Title: =============== My Movie Collection Sinatra App - Movie XSS Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2294 Release Date: ============= 2021-11-01 Vulnerability Laboratory ID VL-ID: ====================================...

assimp:assimp_fuzzer: Container-overflow in m3d_load

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=4686744226758656 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerasanassimp Platform Id: linux Crash Type: Container-overflow READ 1 Crash Address: 0x61700000055...

imagemagick:encoder_heic_fuzzer: Stack-buffer-overflow in void apply_sao_internal<unsigned short>

Detailed Report: https://oss-fuzz.com/testcase?key=5353262910930944 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzerasani386imagemagick Platform Id: linux Crash Type: Stack-buffer-overflow READ 4 Crash Address: 0xeeb00f0c Crash State: void...

xpdf:fuzz_pdfload: Heap-buffer-overflow in JPXStream::inverseTransformLevel

Detailed Report: https://oss-fuzz.com/testcase?key=4897295645147136 Project: xpdf Fuzzing Engine: afl Fuzz Target: fuzzpdfload Job Type: aflasanxpdf Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x606000003d1c Crash State: JPXStream::inverseTransformLevel...

leptonica:pix_rotate_shear_fuzzer: Use-of-uninitialized-value in put16bitbwtile

Project: https://github.com/DanBloomberg/leptonica.git Detailed Report: https://oss-fuzz.com/testcase?key=5258208281755648 Project: leptonica Fuzzing Engine: libFuzzer Fuzz Target: pixrotateshearfuzzer Job Type: libfuzzermsanleptonica Platform Id: linux Crash Type: Use-of-uninitialized-value Cras...

USN-5080-1: Libgcrypt vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 18.04 Description Libgcrypt could be made to expose sensitive information. CVEs contained in this USN include: CVE-2021-33560, CVE-2021-40528. Affected Cloud Foundry Products and Versions Severity is medium unless otherwis...

USN-5093-1: Vim vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 16.04 Canonical Ubuntu 18.04 Description Several security issues were fixed in Vim. CVEs contained in this USN include: CVE-2021-3770, CVE-2021-3778, CVE-2021-3796. Affected Cloud Foundry Products and Versions Severity is...