imagemagick/ping_gif_fuzzer: Use-of-uninitialized-value in cmsMLUgetASCII

Detailed report: https://oss-fuzz.com/testcase?key=5727665058217984 Project: imagemagick Fuzzer: libFuzzerimagemagickpinggiffuzzer Fuzz target binary: pinggiffuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

imagemagick/ping_jng_fuzzer: Use-of-uninitialized-value in LibRaw::canon_has_lowbits

Detailed report: https://oss-fuzz.com/testcase?key=4909191931101184 Project: imagemagick Fuzzer: libFuzzerimagemagickpingjngfuzzer Fuzz target binary: pingjngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

llvm/llvm-dwarfdump-fuzzer: Heap-buffer-overflow in llvm::object::Decompressor::consumeCompressedGnuHeader

Project: https://github.com/llvm/llvm-project.git Detailed report: https://oss-fuzz.com/testcase?key=5767510275129344 Project: llvm Fuzzer: libFuzzerllvmllvm-dwarfdump-fuzzer Fuzz target binary: llvm-dwarfdump-fuzzer Job Type: libfuzzerasanllvm Platform Id: linux Crash Type: Heap-buffer-overflow...

wireshark/fuzzshark_ip_proto-udp: Heap-buffer-overflow in Dot11DecryptScanForKeys

Project: https://code.wireshark.org/review/wireshark Detailed report: https://oss-fuzz.com/testcase?key=5122206420959232 Project: wireshark Fuzzer: libFuzzerwiresharkfuzzsharkipproto-udp Fuzz target binary: fuzzsharkipproto-udp Job Type: libfuzzerasanwireshark Platform Id: linux Crash Type:...

Easy Hosting Control Panel 0.37.12.b Cross Site Request Forgery

Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/EHCP-v0.37.12.b-MULTIPLE-CSRF.txt + ISR: Apparition Security Greetz: indoushka|Eduardo|Dirty0tis Vendor: ======== www.ehcp.net Product: ========= Easy Hosting Control Panel v0.37.12.b Ehcp...

imagemagick/encoder_label_fuzzer: Use-of-uninitialized-value in GetImageFromList

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=4904704847904768 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderlabelfuzzer Fuzz target binary: encoderlabelfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

imagemagick/encoder_label_fuzzer: Use-of-uninitialized-value in IsSVGCompliant

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=6317289526788096 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderlabelfuzzer Fuzz target binary: encoderlabelfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

D-Link DIR-868L 1.12 Cross Site Request Forgery

Confidentiality class: Internal & Partner ======================================================================= title: Cross Site Request Forgery product: DIR-868L vulnerable version: 1.12 fixed version: 1.20B01 impact: Medium homepage: http://www.dlink.com/ found: 2018-02-18 by: S. Tripathy...

imagemagick/encoder_label_fuzzer: Use-of-uninitialized-value in FxEvaluateSubexpression

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=6312993015988224 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderlabelfuzzer Fuzz target binary: encoderlabelfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

imagemagick/ping_mvg_fuzzer: Use-of-uninitialized-value in StringInfoToHexString

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5395141526290432 Project: imagemagick Fuzzer: libFuzzerimagemagickpingmvgfuzzer Fuzz target binary: pingmvgfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

imagemagick/encoder_label_fuzzer: Use-of-uninitialized-value in IsFuzzyEquivalencePixelInfo

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=6354077196746752 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderlabelfuzzer Fuzz target binary: encoderlabelfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

imagemagick/encoder_label_fuzzer: Use-of-uninitialized-value in AbsolutePixelValue

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5140645722193920 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderlabelfuzzer Fuzz target binary: encoderlabelfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

imagemagick/encoder_heic_fuzzer: Use-of-uninitialized-value in heif::HeifContext::decode_full_grid_image

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5362068734607360 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderheicfuzzer Fuzz target binary: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

Report: Intel Facing New Spectre-Like Security Flaws

Intel may be facing as many as eight new Spectre-level vulnerabilities in its chips, a new report alleges. The report comes months after the Spectre and Meltdown flaws first rocked the silicon industry in early 2018. German magazine c’t reported on Thursday that the new security flaws in Intel CP...

graphicsmagick/coder_DPX_fuzzer: Use-of-uninitialized-value in RGBTransformPackets

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5966363016298496 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderDPXfuzzer Fuzz target binary: coderDPXfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type:...

Buffer Overflow in Lenovo System Update Drive Mapping Utility - US

Lenovo Security Advisory: LEN-19625 Potential Impact: Buffer overflow resulting in undefined behaviors, such as execution of arbitrary code Severity: Medium Scope of Impact: Lenovo-specific CVE Identifier: CVE-2018-9063 Summary Description: MapDrv C:\Program Files\Lenovo\System Update\mapdrv.exe...

graphicsmagick/coder_8BIMTEXT_fuzzer: Use-of-uninitialized-value in format8BIM

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5699745893842944 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoder8BIMTEXTfuzzer Fuzz target binary: coder8BIMTEXTfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Cras...

gdal/gdal_fuzzer: Heap-buffer-overflow in PCIDSK::CPCIDSKGeoref::Load

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5443800485855232 Project: gdal Fuzzer: libFuzzergdalfuzzer Fuzz target binary: gdalfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 16 Crash Address:...

gdal/gdal_vrt_fuzzer: Index-out-of-bounds in RIKRasterBand::IReadBlock

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=4664792370380800 Project: gdal Fuzzer: libFuzzergdalvrtfuzzer Fuzz target binary: gdalvrtfuzzer Job Type: libfuzzerubsangdal Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

Siemens Medium Voltage SINAMICS Products (Update A)

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION : Exploitable remotely/low skill level to exploit Vendor : Siemens Equipment : Medium Voltage SINAMICS Products Vulnerabilities : Improper Input Validation 2. UPDATE INFORMATION This updated advisory is a follow-up to the original advisory titled...