gdal: Heap-buffer-overflow in gbits

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=6390133953658880 Project: gdal Fuzzer: libFuzzergdalfuzzer Fuzz target binary: gdalfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

gdal: Heap-buffer-overflow in NTFRecord::GetField

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5870476733710336 Project: gdal Fuzzer: libFuzzergdalshapefuzzer Fuzz target binary: shapefuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 6 Crash Address:...

gdal: Heap-buffer-overflow in ReadGrib1Sect1

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=6265032025309184 Project: gdal Fuzzer: libFuzzergdalfilesystemfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x605000014404 Crash State:...

gdal: Heap-buffer-overflow in memBitRead

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=6434613171847168 Project: gdal Fuzzer: libFuzzergdalfuzzer Fuzz target binary: gdalfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

libxml2: Use-of-uninitialized-value in xmlValidateRef

Project: https://gitlab.gnome.org/GNOME/libxml2.git Detailed report: https://oss-fuzz.com/testcase?key=5884925003694080 Project: libxml2 Fuzzer: libFuzzerlibxml2xmlreadmemoryfuzzer Fuzz target binary: libxml2xmlreadmemoryfuzzer Job Type: libfuzzermsanlibxml2 Platform Id: linux Crash Type:...

gdal: Crash in GXFReadRawScanlineFrom

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5535521092665344 Project: gdal Fuzzer: libFuzzergdalfilesystemfuzzer Fuzz target binary: gdalfilesystemfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

gdal: Heap-buffer-overflow in gbits

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5734244934483968 Project: gdal Fuzzer: libFuzzergdalfilesystemfuzzer Fuzz target binary: gdalfilesystemfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

gdal: Heap-buffer-overflow in ParseGrid

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=4754254998798336 Project: gdal Fuzzer: libFuzzergdalfilesystemfuzzer Fuzz target binary: gdalfilesystemfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash...

gdal: Heap-buffer-overflow in NTFFileReader::ProcessAttDesc

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=4847781791399936 Project: gdal Fuzzer: libFuzzergdalogrfuzzer Fuzz target binary: ogrfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

proj4: Crash in pj_apply_vgridshift

Detailed report: https://oss-fuzz.com/testcase?key=5036113288757248 Project: proj4 Fuzzer: aflproj4standardfuzzer Fuzz target binary: standardfuzzer Job Type: aflasanproj4 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f2c32625b3c Crash State: pjapplyvgridshift reverse3d reverseobs...

XSS in Error Page - ownCloud security advisory

Platform: ownCloud Server Versions: 10.0.2 Date: 5/31/2017 Risk level: Medium CVSS v3 Base Score: 4.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N CWE: Improper Neutralization of Input During Web Page Generation ‘Cross-site Scripting’ CWE-79 HackerOne report: 215410...

Security advisory: Normal user can somehow make admin to delete shared folders

Platform: ownCloud Server Versions: 10.0.2 Date: 5/31/2017 Risk level: Medium CVSS v3 Base Score: 4.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N CWE: Improper Privilege Management CWE-269 HackerOne report:Â 166581...

gdal: Heap-buffer-overflow in ILI1Reader::ReadParseLine

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=6710597422940160 Project: gdal Fuzzer: libFuzzergdalogrfuzzer Fuzz target binary: ogrfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address:...

gdal: Heap-buffer-overflow in NITFReadImageBlock

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5767591316422656 Project: gdal Fuzzer: libFuzzergdalfuzzer Fuzz target binary: gdalfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

ffmpeg: Crash in FDKreadBits

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5021082513833984 Project: ffmpeg Fuzzer: aflffmpegAVCODECIDLIBFDKAACfuzzer Fuzz target binary: ffmpegAVCODECIDLIBFDKAACfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: UNKNOWN READ Crash...

Lenovo Connect2 Ad-hoc Wifi Network Key Stored in User-readable Location - us

Lenovo Security Advisory: LEN-14398 Potential Impact: Disclosure of ad-hoc wifi network key stored in user-readable location Severity: Medium Scope of Impact: Lenovo Specific CVE Identifier: CVE-2017-3742 Summary Description: An internal assessment has identified a vulnerability in Lenovo Connect...

wget2: Heap-buffer-overflow in getContent

Project: https://gitlab.com/gnuwget/wget2.git Detailed report: https://oss-fuzz.com/testcase?key=5103826937839616 Project: wget2 Fuzzer: aflwget2libwgetmetalinkparsefuzzer Fuzz target binary: libwgetmetalinkparsefuzzer Job Type: aflasanwget2 Platform Id: linux Crash Type: Heap-buffer-overflow REA...

Ampache 3.8.2 Cross Site Scripting

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AMPACHE-v3.8.2-XSS.txt + ISR: ApparitionSec Vendor: ========== ampache.org Product: ============== ampache v3.8.2 A web based audio/video streaming application and file...

gnutls: Use-of-uninitialized-value in _wrap_nettle_pk_verify

Project: https://gitlab.com/gnutls/gnutls.git Detailed report: https://oss-fuzz.com/testcase?key=4994565519966208 Project: gnutls Fuzzer: libFuzzergnutlsclientfuzzer Fuzz target binary: gnutlsclientfuzzer Job Type: libfuzzermsangnutls Platform Id: linux Crash Type: Use-of-uninitialized-value Cras...

Perch v3.0.3 CMS - Multiple Web Vulnerabilities

Document Title: =============== Perch v3.0.3 CMS - Multiple Web Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2067 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-15948 CVE-ID: ======= CVE-2017-15948 Release Date: ============...