CVE-2014-7980

Multiple cross-site scripting XSS vulnerabilities in template.php in Zen theme 7.x-3.x before 7.x-3.3 and 7.x-5.x before 7.x-5.5 for Drupal allow remote authenticated users with the "administer themes" permission to inject arbitrary web script or HTML via the skiplinktext setting and unspecified...

flac:fuzzer_seek: Heap-buffer-overflow in process_page_

Detailed Report: https://oss-fuzz.com/testcase?key=4953351625703424 Project: flac Fuzzing Engine: afl Fuzz Target: fuzzerseek Job Type: aflasanflac Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x5220000437e0 Crash State: processpage FLACoggdecoderaspectskiplink...

PT-2014-8352

Name of the Vulnerable Software and Affected Versions Zen theme versions 7.x-3.x before 7.x-3.3 Zen theme versions 7.x-5.x before 7.x-5.5 Description The issue allows remote authenticated users with the "administer themes" permission to inject arbitrary web script or HTML via the skip link text...