894 matches found
sudoers:fuzz_sudoers: Negative-size-param in expand_include
Detailed Report: https://oss-fuzz.com/testcase?key=4997563705065472 Project: sudoers Fuzzing Engine: libFuzzer Fuzz Target: fuzzsudoers Job Type: libfuzzerasansudoers Platform Id: linux Crash Type: Negative-size-param Crash Address: Crash State: expandinclude pushinclude sudoersparse Sanitizer:...
OSV-2021-246 Memcpy-param-overlap in frame_get_usermeta
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29973 Crash type: Memcpy-param-overlap Crash state: framegetusermeta blosc2frametoschunk blosc2schunkopensframe...
PT-2021-28031
Name of the Vulnerable Software and Affected Versions blosc2 affected versions not specified Description The issue is related to a crash type known as Memcpy-param-overlap. Technical details about the crash state include the involvement of specific functions: frame get usermeta, blosc2 frame to...
PHPGurukul Daily Expense Tracker System 跨站脚本漏洞
Daily Expense Tracker System is a PHP and MySQL based daily expense tracking system. Daily Expense Tracker System suffers from a cross-site scripting vulnerability that originates from the add-expense.php Item parameter. No details of the vulnerability are available at this time...
c-blosc2:decompress_frame_fuzzer: Memcpy-param-overlap in frame_get_usermeta
Project: https://github.com/Blosc/c-blosc2.git Detailed Report: https://oss-fuzz.com/testcase?key=5035219092635648 Project: c-blosc2 Fuzzing Engine: libFuzzer Fuzz Target: decompressframefuzzer Job Type: libfuzzerasanc-blosc2 Platform Id: linux Crash Type: Memcpy-param-overlap Crash Address:...
WS-2021-0189
c-blosc2 in versions v2.0.0-beta.1 to v2.0.0-beta.4 is vulnerable to Memcpy-param-overlap in framegetusermeta, related to blosc/frame.c...
OSV-2018-369 Negative-size-param in get_urls_css
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=8032 Crash type: Negative-size-param Crash state: geturlscss wgetcssfuzzer.c...
PT-2021-27591
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type known as Negative-size-param. The crash state involves the get urls css function and is associated with the wget css...
qemu:qemu-fuzz-i386-target-generic-fuzz-e1000e: Memcpy-param-overlap in flatview_write_continue
Detailed Report: https://oss-fuzz.com/testcase?key=4733648622452736 Project: qemu Fuzzing Engine: libFuzzer Fuzz Target: qemu-fuzz-i386-target-generic-fuzz-e1000e Job Type: libfuzzerasanqemu Platform Id: linux Crash Type: Memcpy-param-overlap Crash Address: 0x7f90b7e00025,0x7f90b7e00604 and...
OSV-2017-78 Negative-size-param in UA_SecureChannel_processChunk
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=3609 Crash type: Negative-size-param Crash state: UASecureChannelprocessChunk processCompleteChunk UAConnectionprocessChunks...
PT-2021-27445
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type known as Negative-size-param. The crash occurs in the following functions: UA SecureChannel processChunk,...
PT-2020-22190
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash caused by a negative-size-param, as reported by OSS-Fuzz. The crash involves the functions tcos decipher, sc decipher, and...
opensc:fuzz_pkcs15_reader: Negative-size-param in tcos_decipher
Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=6280582086656000 Project: opensc Fuzzing Engine: libFuzzer Fuzz Target: fuzzpkcs15reader Job Type: libfuzzerasanopensc Platform Id: linux Crash Type: Negative-size-param Crash Address: Crash State:...
curl:curl_fuzzer: Negative-size-param in mqtt_publish
Project: https://github.com/curl/curl.git Detailed Report: https://oss-fuzz.com/testcase?key=5157318102745088 Project: curl Fuzzing Engine: honggfuzz Fuzz Target: curlfuzzer Job Type: honggfuzzasancurl Platform Id: linux Crash Type: Negative-size-param Crash Address: Crash State: mqttpublish...
VulnCheck KEV: CVE-2015-2208
The saveObject function in moadmin.php in phpMoAdmin 1.1.2 allows remote attackers to execute arbitrary commands via shell metacharacters in the object parameter...
qemu:qemu-fuzz-i386-target-generic-fuzz-e1000e: Memcpy-param-overlap in flatview_write_continue
Detailed Report: https://oss-fuzz.com/testcase?key=5646951483441152 Project: qemu Fuzzing Engine: libFuzzer Fuzz Target: qemu-fuzz-i386-target-generic-fuzz-e1000e Job Type: libfuzzerasanqemu Platform Id: linux Crash Type: Memcpy-param-overlap Crash Address: 0x7f1348400000,0x7f1348400f05 and...
PT-2020-14113
Name of the Vulnerable Software and Affected Versions OX App Suite versions prior to 7.10.4 Description The issue allows for XSS in the stats/diagnostic endpoint, specifically when the param variable is used. This could potentially lead to malicious script execution. Recommendations For OX App...
CVE-2020-15004: Improper Neutralization of Input During Web Page Generation
OX App Suite through 7.10.3 allows stats/diagnostic?param= XSS...
Cross-site Scripting (XSS)
symphonycms/symphony-2 is vulnerable to cross-site scripting. An attacker is able to inject and execute malicious script or HTML into the fields'body' param via events\event.publisharticle.php when a user visits the page...