CVE-2020-11001

In Wagtail, CVE-2020-11001 is an XSS vulnerability in the page revision comparison view of the admin interface. The issue affects Wagtail versions prior to 2.8.1 and 2.7.2, where a limited-permission editor could craft a revision history that, when viewed by a higher-privilege user, could execute...

PT-2020-12483 · Wagtail · Wagtail

Name of the Vulnerable Software and Affected Versions: Wagtail versions prior to 2.7.2 and prior to 2.8.1 Description: A cross-site scripting XSS vulnerability exists on the page revision comparison view within the Wagtail admin interface. A user with a limited-permission editor account for the...

Lenovo Vantage Vulnerabilities - Lenovo Support US

No description provided...

TPM 2.0 device can't be recognized in Windows Server 2012 R2

TPM 2.0 device can't be recognized in Windows Server 2012 R2 This article describes an issue that occurs on a Trusted Platform Module TPM 2.0 device in Windows Server 2012 R2. You can fix this issue by using the update in this article. Before you install this update, check out the Prerequisites...

Command Injection

Amendment This was deemed not a vulnerability. Overview git-revision-webpack-plugin is a simple webpack plugin that generates version and commithash files during build based on a local git repository. Affected versions of this package are vulnerable to Command Injection. The function commithash...

ndpi:fuzz_process_packet: Heap-buffer-overflow in ndpi_search_irc_tcp

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=4788353921974272 Project: ndpi Fuzzing Engine: afl Fuzz Target: fuzzprocesspacket Job Type: aflasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 7 Crash Address: 0x611000257ec0 Crash State...

CVE-2019-16528

An issue was discovered in the AbuseFilter extension for MediaWiki. includes/special/SpecialAbuseLog.php allows attackers to obtain sensitive information, such as deleted/suppressed usernames and summaries, from AbuseLog revision data. This affects REL132 and REL133...

matio:matio_fuzzer: Segv on unknown address in H5O_chunk_deserialize

Project: git://git.code.sf.net/p/matio/matio Detailed Report: https://oss-fuzz.com/testcase?key=5740159733858304 Project: matio Fuzzing Engine: afl Fuzz Target: matiofuzzer Job Type: aflasanmatio Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: H5Ochunkdeserializ...

binutils:fuzz_disassemble: Use-of-uninitialized-value in print_insn_metag

Detailed Report: https://oss-fuzz.com/testcase?key=5696334771519488 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzdisassemble Job Type: libfuzzermsanbinutils Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: printinsnmetag fuzzdisassemble.c...

binutils:fuzz_disassemble: Use-of-uninitialized-value in htab_find_with_hash

Detailed Report: https://oss-fuzz.com/testcase?key=5189041990664192 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzdisassemble Job Type: libfuzzermsanbinutils Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: htabfindwithhash printinsn32...

libressl:asn1: Crash in asn1_item_print_ctx

Project: https://github.com/libressl-portable/portable.git Detailed Report: https://oss-fuzz.com/testcase?key=5098483184041984 Project: libressl Fuzzing Engine: libFuzzer Fuzz Target: asn1 Job Type: libfuzzerasanlibressl Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x60a000280000...

libsass:data_context_fuzzer: Use-of-uninitialized-value in std::__1::vector<std::__1::vector<Sass::Extension, std::__1::allocator<Sass::Ext

Detailed Report: https://oss-fuzz.com/testcase?key=5682028378062848 Project: libsass Fuzzing Engine: libFuzzer Fuzz Target: datacontextfuzzer Job Type: libfuzzermsanlibsass Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

samba:fuzz_ndr_drsuapi_TYPE_OUT: Heap-buffer-overflow in lzxpress_decompress

Detailed Report: https://oss-fuzz.com/testcase?key=6220865596555264 Project: samba Fuzzing Engine: libFuzzer Fuzz Target: fuzzndrdrsuapiTYPEOUT Job Type: libfuzzerasansamba Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6040000002fc Crash State: lzxpressdecompress...

libavif:avif_decode_fuzzer: Null-dereference READ with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5645512985542656 Project: libavif Fuzzing Engine: libFuzzer Fuzz Target: avifdecodefuzzer Job Type: libfuzzerasanlibavif Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: NULL Sanitizer: address ASAN...

CVE-2019-20500

D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Save Configuration functionality in the Web interface, using shell metacharacters in the admin.cgi?action=configsave configBackup or downloadServerip parameter...

mysql-server:fuzz_real_query: Memcpy-param-overlap in read_ok_ex

Detailed Report: https://oss-fuzz.com/testcase?key=5111911572307968 Project: mysql-server Fuzzing Engine: libFuzzer Fuzz Target: fuzzrealquery Job Type: libfuzzerasanmysql-server Platform Id: linux Crash Type: Memcpy-param-overlap Crash Address: 0x7f0132daf848,0x999a189acc73fd41 and 0x62700000942...

htslib:hts_open_fuzzer: Heap-buffer-overflow in hts_md5_update

Project: https://github.com/samtools/htslib.git Detailed Report: https://oss-fuzz.com/testcase?key=5082614308536320 Project: htslib Fuzzing Engine: honggfuzz Fuzz Target: htsopenfuzzer Job Type: honggfuzzasanhtslib Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

wasmtime:differential: Crash in [stack]

Project: https://github.com/bytecodealliance/wasmtime.git Detailed Report: https://oss-fuzz.com/testcase?key=5637784696258560 Project: wasmtime Fuzzing Engine: libFuzzer Fuzz Target: differential Job Type: libfuzzerasanwasmtime Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address:...

php:php-fuzz-mbstring: Heap-use-after-free in quantifiers_memory_node_info

Detailed Report: https://oss-fuzz.com/testcase?key=5672130576646144 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-mbstring Job Type: libfuzzerasani386php Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0xf5239f80 Crash State: quantifiersmemorynodeinfo...

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2019-1671)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...