libxml2: Heap-buffer-overflow in xmlDictComputeFastKey

Project: https://gitlab.gnome.org/GNOME/libxml2.git Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=5675748065017856 Fuzzer: libFuzzerlibxml2xmlreadmemoryfuzzer Job Type: libfuzzerasanlibxml2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

libchewing: Heap-buffer-overflow in _Inner_InternalSpecialSymbol

Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=4509892513628160 Fuzzer: libFuzzerchewingrandominitfuzzer Job Type: libfuzzerasanlibchewing Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x7f6fe2738fb0 Crash State: InnerInternalSpecialSymbol...

libchewing: Heap-buffer-overflow in CheckUserChoose

Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=5228195863330816 Fuzzer: libFuzzerchewingdefaultfuzzer Job Type: libfuzzerasanlibchewing Platform Id: linux Crash Type: Heap-buffer-overflow READ 3 Crash Address: 0x603000004825 Crash State: CheckUserChoose FindInterval Phrasi...

libchewing: Heap-buffer-overflow in _Inner_InternalSpecialSymbol

Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=4564616034123776 Fuzzer: libFuzzerchewingdynamicconfigfuzzer Job Type: libfuzzerasanlibchewing Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x7f302a8f1fb0 Crash State: InnerInternalSpecialSymbol...

libchewing: Heap-buffer-overflow in ChoiceTheSame

Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=4536466013159424 Fuzzer: libFuzzerchewingdefaultfuzzer Job Type: libfuzzerasanlibchewing Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x603000050241 Crash State: ChoiceTheSame SetChoiceInfo...

SPIP 3.1.13.1.2 - File Enumeration Path Traversal

SPIP 3.1.13.1.2 - File Enumeration Path Traversal SPIP 3.1.1/3.1.2 File Enumeration / Path Traversal CVE-2016-7982 Product Description SPIP is a publishing system for the Internet, which put importance on collaborative working, multilingual environments and ease of use. It is free software,...

SPIP 3.1.1/3.1.2 - File Enumeration / Path Traversal

SPIP 3.1.1/3.1.2 File Enumeration / Path Traversal CVE-2016-7982 Product Description SPIP is a publishing system for the Internet, which put importance on collaborative working, multilingual environments and ease of use. It is free software, distributed under the GNU/GPL licence. Vulnerability...

Heap-buffer-overflow in _Inner_InternalSpecialSymbol

Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=6203601458298880 Fuzzer: libFuzzerchewingfuzzer Job Type: libfuzzerasanlibchewing Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x7f1300d44fb0 Crash State: InnerInternalSpecialSymbol EasySymbolInput...

Google Chrome < 54.0.2840.59 Multiple Vulnerabilities

Binary data 9687.pasl...

Heap-buffer-overflow in find_minlength

Project: svn://vcs.exim.org/pcre2/code/trunk Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=4881488118022144 Fuzzer: libFuzzerpcre2fuzzer Job Type: libfuzzerasanpcre2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x614000002c33 Crash State:...

Cisco Patches Critical Bug In Video Conferencing Server Hardware

On Wednesday Cisco Systems patched a critical vulnerability found in its Cisco Meeting Server hardware, a key component in its enterprise audio, web and video conferencing service. The flaw, according to a Cisco Security Advisory, could allow an unauthenticated remote attacker to masquerade as a...

iWisoft Video Converter 1.2 DLL Hijacking

i?Document Title: =============== iWisoft Video Converter 1.2 - DLL Hijacking Vulnerability Release Date: ============= 2016-10-04 Vulnerability Disclosure Timeline: ================================== 2016-10-04 : Discovery of the Vulnerability 2016-10-04 : Contact the Vendor No Response 2016-10-...

Microsoft Wireless Desktop 2000 Insufficent Protection

Exploit for windows platform in category local exploits Product: Microsoft Wireless Desktop 2000 Manufacturer: Microsoft Affected Versions: Ver. A Tested Versions: Ver. A Vulnerability Type: Insufficient Protection of Code Firmware and Data Cryptographic Key Risk Level: Medium Solution Status: Op...

Facebook API 2.1 Open Redirect

Document Title: =============== Facebook API v2.1 - RFC6749 Open Redirect Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1972 Vulnerability Magazine:...

RSA Enterprise Compromise Assessment Tool (ECAT) 4.1.0.1 XXE Injection

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: XML External Entity Injection XXE product: RSA Enterprise Compromise Assessment Tool ECAT vulnerable version: 4.1.0.1 fixed version: 4.1.2.0 CVE Number: - impact: Medium...

Heap-buffer-overflow in archive_read_format_cpio_read_header

Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=4798906516897792 Fuzzer: libFuzzerlibarchivefuzzer Job Type: libfuzzerasanlibarchive Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x61900014e080 Crash State: archivereadformatcpioreadheader...

Heap-buffer-overflow in exprVectorRegister

Detailed report: https://clusterfuzz-external.appspot.com/testcase?key=6288735830278144 Fuzzer: libFuzzersqlite3fuzzer Job Type: libfuzzerasansqlite3 Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x606000000720 Crash State: exprVectorRegister codeVectorCompare...

Symantec Web Gateway Management Console Interface Command Injection

SUMMARY Symantec has released an update to address a Symantec Web Gateway SWG Management Console Interface command injection issue bypassing validation restrictions to add an unauthorized whitelist entry. AFFECTED PRODUCTS Symantec Web Gateway SWG --- CVE | Affected Versions | Remediation...

Clean Master v1.0 - Unquoted Path Privilege Escalation

Document Title: =============== Clean Master v1.0 - Unquoted Path Privilege Escalation References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1968 Release Date: ============= 2016-10-04 Vulnerability Laboratory ID VL-ID: ==================================== 19...

AuraDVD Ripper Professional 1.6.3 DLL Hijacking

Document Title: =============== AuraDVD Ripper Professional v1.6.3 - DLL Hijacking Exploit References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1966 Release Date: ============= 2016-10-04 Vulnerability Laboratory ID VL-ID: ===================================...