16280 matches found
grok:grk_compress_fuzzer: Use-of-uninitialized-value in grk::t1::ojph::local::proc_cq1
Project: https://github.com/GrokImageCompression/grok.git https://github.com/GrokImageCompression/grok-test-data.git Detailed Report: https://oss-fuzz.com/testcase?key=6012230788513792 Project: grok Fuzzing Engine: libFuzzer Fuzz Target: grkcompressfuzzer Job Type: libfuzzermsangrok Platform Id:...
Insufficient Verification of Data Authenticity
Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Insufficient Verification of Data Authenticity via the OAuth flow, where the PKCE verifier is reused as the OAuth state value and reflected back in the redirect URL. An attacker can obtai...
CVE-2026-34825
NocoBase is an AI-powered no-code/low-code platform for building business applications and enterprise solutions. Prior to version 2.0.30, NocoBase plugin-workflow-sql substitutes template variables directly into raw SQL strings via getParsedValue without parameterization or escaping. Any user who...
SandboxJS: Sandbox Escape via Prop Object Leak in New Handler
Description A scope modification vulnerability exists in @nyariv/sandboxjs version 0.8.35 and below. The vulnerability allows untrusted sandboxed code to leak internal interpreter objects through the new operator, exposing sandbox scope objects in the scope hierarchy to untrusted code; an...
GHSA-HG73-4W7G-Q96W SandboxJS: Sandbox Escape via Prop Object Leak in New Handler
Description A scope modification vulnerability exists in @nyariv/sandboxjs version 0.8.35 and below. The vulnerability allows untrusted sandboxed code to leak internal interpreter objects through the new operator, exposing sandbox scope objects in the scope hierarchy to untrusted code; an...
CVE-2026-31397 mm/huge_memory: fix use of NULL folio in move_pages_huge_pmd()
In the Linux kernel, the following vulnerability has been resolved: mm/hugememory: fix use of NULL folio in movepageshugepmd movepageshugepmd handles UFFDIOMOVE for both normal THPs and huge zero pages. For the huge zero page path, srcfolio is explicitly set to NULL, and is used as a sentinel to...
ffmpeg:ffmpeg_AV_CODEC_ID_AAC_DEC_fuzzer: Use-of-uninitialized-value in ff_aac_ec_data_dec
Project: https://git.ffmpeg.org/ffmpeg.git https://github.com/FFmpeg/FFmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6460684568428544 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDAACDECfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type:...
llvm:llvm-opt-fuzzer--x86_64-lower_matrix_intrinsics: Use-of-uninitialized-value in llvm::Value::eraseMetadataIf
Detailed Report: https://oss-fuzz.com/testcase?key=5114845824614400 Project: llvm Fuzzing Engine: libFuzzer Fuzz Target: llvm-opt-fuzzer--x8664-lowermatrixintrinsics Job Type: libfuzzermsanllvm Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...
[SECURITY] Fedora 43 Update: openbao-2.5.2-1.fc43
Openbao secures, stores, and tightly controls access to tokens, passwords, certificates, API keys, and other secrets in modern computing. Openbao handles leasing, key revocation, key rolling, and auditing. Through a unified API, us ers can access an encrypted Key/Value store and network...
OSV-2026-518 Use-of-uninitialized-value in ne_read_block
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=498498500 Crash type: Use-of-uninitialized-value Crash state: nereadblock nesteggreadpacket fuzz.cc...
ROS-20260403-73-0001
A vulnerability in the inftlcore.c component of the Linux operating system kernel involves an unverified return value. Exploitation of the vulnerability could allow an attacker to cause a denial of service...
Linux kernel 安全漏洞
The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the lack of verification of the return value of the hidhwrequest function. This vulnerability may...
ROS-20260403-73-0016
A vulnerability in the drivers/i2c/busses/i2c-qup.c component of the Linux kernel is related to an unverified return value. Exploitation of the vulnerability allows an attacker to cause a denial of service...
PT-2026-32469
A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overflow checks during SQL array value modification. This issue exists due to an integer overflow during array modification where a remote user can trigger the overflow by providing...
PT-2026-32219
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=498498500 Crash type: Use-of-uninitialized-value Crash state: ne read block nestegg read packet fuzz.cc...
SUSE CVE-2026-23416
In the Linux kernel, the following vulnerability has been resolved: mm/mseal: update VMA end correctly on merge Previously we stored the end of the current VMA in currend, and then upon iterating to the next VMA updated currstart to currend to advance to the next VMA. However, this doesn't take...
Rack::Request accepts invalid Host characters, enabling host allowlist bypass
Summary Rack::Request parses the Host header using an AUTHORITY regular expression that accepts characters not permitted in RFC-compliant hostnames, including /, ?, , and @. Because req.host returns the full parsed value, applications that validate hosts using naive prefix or suffix checks can be...
CVE-2026-23416
In the Linux kernel, the following vulnerability has been resolved: mm/mseal: update VMA end correctly on merge Previously we stored the end of the current VMA in currend, and then upon iterating to the next VMA updated currstart to currend to advance to the next VMA. However, this doesn't take...
CVE-2026-23416 mm/mseal: update VMA end correctly on merge
In the Linux kernel, the following vulnerability has been resolved: mm/mseal: update VMA end correctly on merge Previously we stored the end of the current VMA in currend, and then upon iterating to the next VMA updated currstart to currend to advance to the next VMA. However, this doesn't take...
CVE-2026-30522
A Business Logic vulnerability exists in SourceCodester Loan Management System v1.0 due to improper server-side validation. The application allows administrators to create "Loan Plans" with specific penalty rates for overdue payments. While the frontend interface prevents users from entering...