CVE-2023-47609

SQL injection vulnerability in OSS Calendar versions prior to v.2.0.3 allows a remote authenticated attacker to execute arbitrary code or obtain and/or alter the information stored in the database by sending a specially crafted request...

CVE-2023-47609

SQL injection vulnerability in OSS Calendar versions prior to v.2.0.3 allows a remote authenticated attacker to execute arbitrary code or obtain and/or alter the information stored in the database by sending a specially crafted request...

Sql injection

SQL injection vulnerability in OSS Calendar versions prior to v.2.0.3 allows a remote authenticated attacker to execute arbitrary code or obtain and/or alter the information stored in the database by sending a specially crafted request...

CVE-2023-47609

SQL injection vulnerability in OSS Calendar versions prior to v.2.0.3 allows a remote authenticated attacker to execute arbitrary code or obtain and/or alter the information stored in the database by sending a specially crafted request...

CVE-2023-47609

OSS Calendar (CVE-2023-4769) contains an SQL injection vulnerability in versions prior to 2.0.3. An authenticated remote attacker can leverage the flaw to execute arbitrary code or access/modify database information. Root cause is improper handling of input in SQL queries before 2.0.3. The docume...

JVN#67822421: OSS Calendar vulnerable to SQL injection

OSS Calendar provided by Thinkingreed Inc. contains an SQL injection vulnerability CWE-89. Impact A logged-in user may execute an arbitrary code or obtain and/or alter the information stored in the database by sending a specially crafted request. Solution Update the software Update the software...

OSV-2023-1153 Heap-buffer-overflow in pcpp::SSLClientHelloMessage::getCipherSuite

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64124 Crash type: Heap-buffer-overflow READ 2 Crash state: pcpp::SSLClientHelloMessage::getCipherSuite readParsedPacket FuzzTarget.cpp...

OSV-2023-1152 Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64130 Crash type: Security exception Crash state: com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr java.base/java.nio.ByteBuffer.position java.base/sun.nio.cs.UTF8.updatePositions...

OSV-2023-1149 Heap-buffer-overflow in bit_read_fixed

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64118 Crash type: Heap-buffer-overflow READ 16 Crash state: bitreadfixed bitreadTF decodepreR13sentinel...

OSV-2023-1146 Negative-size-param in pcpp::RawPacket::insertData

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64111 Crash type: Negative-size-param Crash state: pcpp::RawPacket::insertData pcpp::Packet::extendLayer pcpp::BgpUpdateMessageLayer::setNetworkLayerReachabilityInfo...

OSV-2023-1145 Heap-buffer-overflow in pcpp::GREv1Layer::computeCalculateFields

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64110 Crash type: Heap-buffer-overflow WRITE 2 Crash state: pcpp::GREv1Layer::computeCalculateFields pcpp::Packet::computeCalculateFields FuzzTarget.cpp...

PT-2023-30515 · Unknown · Oss Calendar

Name of the Vulnerable Software and Affected Versions: OSS Calendar versions prior to 2.0.3 Description: The issue allows a remote authenticated attacker to execute arbitrary code or obtain and/or alter the information stored in the database by sending a specially crafted request. This can be...

PT-2023-35581 · Git +1 · Pcapplusplus

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 2 crash occurred in the pcpp::SSLClientHelloMessage::getCipherSuite function, as reported by OSS-Fuzz. The crash was triggere...

OSV-2023-1140 Heap-buffer-overflow in H5MM_strdup

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64092 Crash type: Heap-buffer-overflow READ Crash state: H5MMstrdup H5Gstabgetnamebyidxcb H5Gnodebyidx...

OSV-2023-1136 Security exception in org.apache.poi.hssf.record.crypto.Biff8DecryptingStream.isNeverEncryptedRecord

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64051 Crash type: Security exception Crash state: org.apache.poi.hssf.record.crypto.Biff8DecryptingStream.isNeverEncryptedRecord org.apache.poi.hssf.record.crypto.Biff8DecryptingStream.readRecordSID...

OSV-2023-1135 Segv on unknown address in flb_sds_cat_safe

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64049 Crash type: Segv on unknown address Crash state: flbsdscatsafe flbcfkeytranslate flbcfsectionpropertyadd...

OSV-2023-1124 UNKNOWN READ in cmsIT8GetDataRowColDbl

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63954 Crash type: UNKNOWN READ Crash state: cmsIT8GetDataRowColDbl cmscgatsfuzzer.c...

OSV-2023-1122 Stack-buffer-overflow in dxf_header_read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63919 Crash type: Stack-buffer-overflow READ Crash state: dxfheaderread dwgreaddxf llvmfuzz.c...

OSV-2023-1121 Security exception in org.apache.poi.util.LZWDecompresser.decompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63925 Crash type: Security exception Crash state: org.apache.poi.util.LZWDecompresser.decompress org.apache.poi.util.LZWDecompresser.decompress org.apache.poi.hdgf.streams.CompressedStreamStore.decompress...

OSV-2023-1115 Use-of-uninitialized-value in fp_uninit

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63867 Crash type: Use-of-uninitialized-value Crash state: fpuninit cryptofuzz::module::libecc::OpECCValidatePubkey cryptofuzz::ExecutorBase::callM...