libreoffice/dxffuzzer: Index-out-of-bounds in DXFLType::Read

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=6357397338587136 Project: libreoffice Fuzzer: libFuzzerlibreofficedxffuzzer Fuzz target binary: dxffuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Index-out-of-boun...

gdal/ogr_fuzzer: Heap-buffer-overflow in VSIArchiveFilesystemHandler::SplitFilename

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5454210410741760 Project: gdal Fuzzer: libFuzzergdalogrfuzzer Fuzz target binary: ogrfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

librawspeed/FiffParserFuzzer-GetDecoder-Decode: Use-of-uninitialized-value in rawspeed::RawImageData::checkMemIsInitialized

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=4955346603868160 Project: librawspeed Fuzzer: libFuzzerlibrawspeedFiffParserFuzzer-GetDecoder-Decode Fuzz target binary: FiffParserFuzzer-GetDecoder-Decode Job Type: libfuzzermsanlibrawspeed...

llvm_libcxx/regex_ECMAScript: Crash in std::__1::__back_ref<char>::__exec

Detailed report: https://oss-fuzz.com/testcase?key=6590682782236672 Project: llvmlibcxx Fuzzer: libFuzzerllvmlibcxxregexECMAScript Fuzz target binary: regexECMAScript Job Type: libfuzzerasanllvmlibcxx Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00037fff7fff Crash State:...

librawspeed/TiffDecoderFuzzer-NefDecoder: Use-of-uninitialized-value in rawspeed::RawImageData::checkMemIsInitialized

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=4659952477011968 Project: librawspeed Fuzzer: libFuzzerlibrawspeedTiffDecoderFuzzer-NefDecoder Fuzz target binary: TiffDecoderFuzzer-NefDecoder Job Type: libfuzzermsanlibrawspeed Platform Id:...

gdal

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=6537397673132032 Project: gdal Fuzzer: libFuzzergdalogrfilesystemfuzzer Fuzz target binary: ogrfilesystemfuzzer Job Type: libfuzzerubsangdal Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

librawspeed/RawSpeedFuzzer: Use-of-uninitialized-value in rawspeed::RawImageData::checkMemIsInitialized

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=6276046933458944 Project: librawspeed Fuzzer: libFuzzerlibrawspeedRawSpeedFuzzer Fuzz target binary: RawSpeedFuzzer Job Type: libfuzzermsanlibrawspeed Platform Id: linux Crash Type:...

llvm/llvm-dwarfdump-fuzzer: Heap-buffer-overflow in llvm::identify_magic

Project: https://github.com/llvm/llvm-project.git Detailed report: https://oss-fuzz.com/testcase?key=6095520196984832 Project: llvm Fuzzer: libFuzzerllvmllvm-dwarfdump-fuzzer Fuzz target binary: llvm-dwarfdump-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Heap-buffer-overflow...

open62541/fuzz_binary_message: Crash in UA_SecureChannel_processChunk

Project: https://github.com/open62541/open62541.git Detailed report: https://oss-fuzz.com/testcase?key=6734765949452288 Project: open62541 Fuzzer: libFuzzeropen62541fuzzbinarymessage Fuzz target binary: fuzzbinarymessage Job Type: libfuzzerubsanopen62541 Platform Id: linux Crash Type: UNKNOWN REA...

dlplibs: Index-out-of-bounds in offsetTOCLookupFn

Detailed report: https://oss-fuzz.com/testcase?key=5037417556869120 Project: dlplibs Fuzzer: libFuzzerdlplibsvsdfuzzer Fuzz target binary: vsdfuzzer Job Type: libfuzzerubsandlplibs Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: offsetTOCLookupFn doLoadFromCommonDat...

dlplibs: Heap-buffer-overflow in ucnv_UTF8FromUTF8

Detailed report: https://oss-fuzz.com/testcase?key=6715693878738944 Project: dlplibs Fuzzer: libFuzzerdlplibspdbfuzzer Fuzz target binary: pdbfuzzer Job Type: libfuzzerasandlplibs Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x604000000afc Crash State: ucnvUTF8FromUTF...

llvm: Heap-buffer-overflow in llvm::StringMapImpl::FindKey

Project: https://github.com/llvm/llvm-project.git Detailed report: https://oss-fuzz.com/testcase?key=5653990445416448 Project: llvm Fuzzer: libFuzzerllvmllvm-dwarfdump-fuzzer Fuzz target binary: llvm-dwarfdump-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Heap-buffer-overflow...

WordPress Ad Widget 2.10.0 Local File Inclusion Vulnerability

WordPress Ad Widget plugin versions 2.10.0 and below suffer from a local file inclusion vulnerability. Advisory Title: WordPress Ad Widget Plugin Local file Inclusion A Security Vulnerability Advisory URL:A A http://www.defensecode.com/advisories.php Software:A A A A A A WordPress Ad Widget plugi...

curl: Heap-buffer-overflow in Curl_client_write

Project: https://github.com/curl/curl.git Detailed report: https://oss-fuzz.com/testcase?key=5836302881652736 Project: curl Fuzzer: libFuzzercurlfuzzer Fuzz target binary: curlfuzzer Job Type: libfuzzerasancurl Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x60c000000173...

harfbuzz: Use-of-uninitialized-value in hb_buffer_t::set_cluster

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=5617496443846656 Project: harfbuzz Fuzzer: libFuzzerharfbuzzhb-fuzzer Fuzz target binary: hb-fuzzer Job Type: libfuzzermsanharfbuzz Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

Lansweeper 6.0.0.63 Cross Site Scripting

============================================= - Release date: October 05th, 2017 - Discovered by: Giovanni Cerrato, Giovanni Guido and BackBox team - Severity: Medium ============================================= I. VULNERABILITY ------------------------- Lansweeper XSS vulnerability. II...

llvm: Heap-buffer-overflow in llvm::DataExtractor::getCStr

Project: https://github.com/llvm/llvm-project.git Detailed report: https://oss-fuzz.com/testcase?key=6309856848904192 Project: llvm Fuzzer: libFuzzerllvmllvm-dwarfdump-fuzzer Fuzz target binary: llvm-dwarfdump-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Heap-buffer-overflow...

Apache OpenNLP XXE Vulnerability

Exploit for multiple platform in category remote exploits CVE-2017-12620 - Apache OpenNLP XXE vulnerability Severity: Medium Vendor: The Apache Software Foundation Versions Affected: OpenNLP 1.5.0 to 1.5.3 OpenNLP 1.6.0 OpenNLP 1.7.0 to 1.7.2 OpenNLP 1.8.0 to 1.8.1 Description: When loading model...

librawspeed: Use-of-uninitialized-value in rawspeed::RawImageData::checkMemIsInitialized

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=6413887396118528 Project: librawspeed Fuzzer: libFuzzerlibrawspeedCiffParserFuzzer-GetDecoder-Decode Fuzz target binary: CiffParserFuzzer-GetDecoder-Decode Job Type: libfuzzermsanlibrawspeed...

ffmpeg: Crash in gmc_mmx

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=4608518562775040 Project: ffmpeg Fuzzer: libFuzzerffmpegAVCODECIDMPEG4fuzzer Job Type: libfuzzerasanffmpeg Crash Type: UNKNOWN READ Crash Address: 0x620ffffffbf8 Crash State: gmcmmx gmcmotion...