libreoffice/xlsfuzzer: Container-overflow in ScAddress::Col

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=5200414640177152 Project: libreoffice Fuzzer: libFuzzerlibreofficexlsfuzzer Fuzz target binary: xlsfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Container-overflow...

mupdf/pdf_fuzzer: Use-of-uninitialized-value in fz_keep_imp

Project: git://git.ghostscript.com/mupdf.git Detailed report: https://oss-fuzz.com/testcase?key=4807604346814464 Project: mupdf Fuzzer: libFuzzermupdfpdffuzzer Fuzz target binary: pdffuzzer Job Type: libfuzzermsanmupdf Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

U.S. Dept Of Defense: Publicly accessible Order confirmations leaking User Emails on ███

Summary: I noticed that a user's order confirmation was publicly accessible leaking email information Description: An attacker can gleam sensitive information that is stored in the order confirmation file Impact Medium Step-by-step Reproduction Instructions...

imagemagick/encoder_tim_fuzzer: Use-of-uninitialized-value in PushColormapIndex

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=6486704652288000 Project: imagemagick Fuzzer: libFuzzerimagemagickencodertimfuzzer Fuzz target binary: encodertimfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

imagemagick/encoder_psd_fuzzer: Use-of-uninitialized-value in ClampPixel

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5650303102746624 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderpsdfuzzer Fuzz target binary: encoderpsdfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

imagemagick/encoder_pdb_fuzzer: Use-of-uninitialized-value in ConstrainColormapIndex

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=4631679604883456 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderpdbfuzzer Fuzz target binary: encoderpdbfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

imagemagick/encoder_label_fuzzer: Heap-buffer-overflow in FxGetSymbol

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=4507441497636864 Project: imagemagick Fuzzer: aflimagemagickencoderlabelfuzzer Fuzz target binary: encoderlabelfuzzer Job Type: aflasanimagemagick Platform Id: linux Crash Type:...

librawspeed/TiffDecoderFuzzer-DngDecoder: Use-of-uninitialized-value in rawspeed::RawImageData::checkMemIsInitialized

Project: https://github.com/darktable-org/rawspeed.git Detailed report: https://oss-fuzz.com/testcase?key=4903058250137600 Project: librawspeed Fuzzer: libFuzzerlibrawspeedTiffDecoderFuzzer-DngDecoder Fuzz target binary: TiffDecoderFuzzer-DngDecoder Job Type: libfuzzermsanlibrawspeed Platform Id:...

WebLog Expert Enterprise 9.4 - Authentication Bypass

WebLog Expert Enterprise 9.4 - Authentication Bypass + Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/WEBLOG-EXPERT-WEB-SERVER-ENTERPRISE-v9.4-AUTHENTICATION-BYPASS.txt + ISR: Apparition Security Vendor: ========...

WebLog Expert Enterprise 9.4 - Authentication Bypass

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/WEBLOG-EXPERT-WEB-SERVER-ENTERPRISE-v9.4-AUTHENTICATION-BYPASS.txt + ISR: Apparition Security Vendor: ======== www.weblogexpert.com Product: ======== WebLog Expert Web Server...

WebLog Expert Enterprise 9.4 - Denial of Service

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/WEBLOG-EXPERT-WEB-SERVER-ENTERPRISE-v9.4-DENIAL-OF-SERVICE.txt + ISR: Apparition Security Vendor: ======= www.weblogexpert.com Product: ========= WebLog Expert Web Server...

gdal/shape_fuzzer: Index-out-of-bounds in DGNParseTagSet

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5352796892168192 Project: gdal Fuzzer: libFuzzergdalshapefuzzer Fuzz target binary: shapefuzzer Job Type: libfuzzerubsangdal Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

imagemagick/encoder_dcm_fuzzer: Use-of-uninitialized-value in ReadDCMImage

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=6310279991263232 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderdcmfuzzer Fuzz target binary: encoderdcmfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

imagemagick/encoder_wpg_fuzzer: Use-of-uninitialized-value in ConstrainColormapIndex

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5521019725938688 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderwpgfuzzer Fuzz target binary: encoderwpgfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

WebLog Expert Web Server Enterprise 9.4 Denial Of Service

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/WEBLOG-EXPERT-WEB-SERVER-ENTERPRISE-v9.4-DENIAL-OF-SERVICE.txt + ISR: Apparition Security Vendor: ======= www.weblogexpert.com Product: ========= WebLog Expert Web Server...

dropbear/fuzzer-preauth: Use-of-uninitialized-value in session_loop

Project: https://secure.ucc.asn.au/hg/dropbear Detailed report: https://oss-fuzz.com/testcase?key=6266181079007232 Project: dropbear Fuzzer: libFuzzerdropbearfuzzer-preauth Fuzz target binary: fuzzer-preauth Job Type: libfuzzermsandropbear Platform Id: linux Crash Type: Use-of-uninitialized-value...

dropbear/fuzzer-preauth_nomaths: Use-of-uninitialized-value in wrapfd_select

Project: https://secure.ucc.asn.au/hg/dropbear Detailed report: https://oss-fuzz.com/testcase?key=5112123366572032 Project: dropbear Fuzzer: libFuzzerdropbearfuzzer-preauthnomaths Fuzz target binary: fuzzer-preauthnomaths Job Type: libfuzzermsandropbear Platform Id: linux Crash Type:...

imagemagick/encoder_pcds_fuzzer: Use-of-uninitialized-value in ClampPixel

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5976991070158848 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderpcdsfuzzer Fuzz target binary: encoderpcdsfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

skia/api_draw_functions: Use-of-uninitialized-value in sk_srcover_bgra_NUMBER

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=6270009237045248 Project: skia Fuzzer: libFuzzerskiaapidrawfunctions Fuzz target binary: apidrawfunctions Job Type: libfuzzermsanskia Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

Softros Network Time System Server 2.3.4 - Denial of Service

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/SOFTROS-NETWORK-TIME-SYSTEM-SERVER-v2.3.4-DENIAL-OF-SERVICE.txt + ISR: Apparition Security Vendor: ============= www.softros.com https://nts.softros.com/downloads/ Product:...