OSV-2020-1849 Use-of-uninitialized-value in RDKit::SubstanceGroup::getBondType

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25906 Crash type: Use-of-uninitialized-value Crash state: RDKit::SubstanceGroup::getBondType RDKit::SubstanceGroup::addCState RDKit::SGroupParsing::ParseSGroupV2000SBVLine...

There is an issue on grub2 before version 2.06 at function read_section_as_string(). It expects a font name to be at max UINT32_MAX - 1 length in bytes but it doesn't verify it before proceed with buffer allocation to read the value from the font value. An attacker may leverage that by crafting a malicious font file which has a name with UINT32_MAX leading to read_section_as_string() to an arithmetic overflow zero-sized allocation and further heap-based buffer overflow.

...

Design/Logic Flaw

Insecure permissions in Nakivo Backup & Replication Director version 9.4.0.r43656 on Linux allow local users to access the Nakivo Director web interface and gain root privileges. This occurs because the database containing the users of the web application and the password-recovery secret value is...

Design/Logic Flaw

In ORY Fosite the security first OAuth2 & OpenID Connect framework for Go before version 0.31.0, when using "privatekeyjwt" authentication the uniqueness of the jti value is not checked. When using client authentication method "privatekeyjwt", OpenId specification says the following about asserti...

Out Of Bound Access

In Qemu 3.0.0, lsidomsgin in hw/scsi/lsi53c895a.c allows out-of-bounds access by triggering an invalid msglen value...

OSV-2020-1818 Use-of-uninitialized-value in grk::TileProcessor::prepare_sod_decoding

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25798 Crash type: Use-of-uninitialized-value Crash state: grk::TileProcessor::preparesoddecoding grk::CodeStream::parsemarkers grk::CodeStream::decompresstiles...

grok:grk_decompress_fuzzer: Use-of-uninitialized-value in grk::TileProcessor::prepare_sod_decoding

Detailed Report: https://oss-fuzz.com/testcase?key=5154931768819712 Project: grok Fuzzing Engine: libFuzzer Fuzz Target: grkdecompressfuzzer Job Type: libfuzzermsangrok Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: grk::TileProcessor::preparesoddecoding...

CVE-2020-0271

In the Settings app, there is an insecure default value. This could lead to local escalation of privilege and tapjacking with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-144507081...

CVE-2020-0271

In the Settings app, there is an insecure default value. This could lead to local escalation of privilege and tapjacking with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-144507081...

Default configuration

In the Settings app, there is an insecure default value. This could lead to local escalation of privilege and tapjacking with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-144507081...

Cross site request forgery (csrf)

An issue was discovered in Gradle Enterprise before 2020.2.5. The cookie used to convey the CSRF prevention token is not annotated with the “secure” attribute, which allows an attacker with the ability to MITM plain HTTP requests to obtain it, if the user mistakenly uses a HTTP instead of HTTPS...

OSV-2020-1787 Use-of-uninitialized-value in zend_generator_search_multi_children_node

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25678 Crash type: Use-of-uninitialized-value Crash state: zendgeneratorsearchmultichildrennode zendgeneratoraddchild zendgeneratoryieldfrom...

OSV-2020-1784 Use-of-uninitialized-value in put_unweighted_pred_16_fallback

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25707 Crash type: Use-of-uninitialized-value Crash state: putunweightedpred16fallback accelerationfunctions::putunweightedpred generateinterpredictionsamples...

libsndfile:sndfile_fuzzer: Use-of-uninitialized-value in dwvw_decode_load_bits

Project: https://github.com/libsndfile/libsndfile.git Detailed Report: https://oss-fuzz.com/testcase?key=6483024919920640 Project: libsndfile Fuzzing Engine: libFuzzer Fuzz Target: sndfilefuzzer Job Type: libfuzzermsanlibsndfile Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

Using Restore to Microsoft Azure with ExpressRoute or site-to-site VPN connectivity to Azure

Challenge You may use Restore to Microsoft Azure for environments with ExpressRoute or site-to-site VPN connectivity to Azure. When using Azure Restore Proxy Appliance and helper appliances to perform the restore, they must have private IP addresses only. Solution Starting with Veeam Backup &...

CVE-2020-13668

Drupal 8 and 9 have a reflected cross-site scripting XSS vulnerability under certain circumstances. An attacker could leverage the way that HTML is rendered for affected forms in order to exploit the vulnerability. Recent assessments: wvu-r7 at September 17, 2020 4:03pm UTC reported: This is...

MSXAdvanced Digital Error Vulnerability

MSXAdvanced is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in MSXAdvanced's smart contract implementation. An attacker could use this vulnerability to set the balance of any user to an arbitrary value...

OSV-2020-1755 Use-of-uninitialized-value in void intra_prediction_angular<unsigned char>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25650 Crash type: Use-of-uninitialized-value Crash state: void intrapredictionangular void decodeintrapredictioninternal decodeintraprediction...

RajTestICO Digital Error Vulnerability

RajTestICO is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in RajTestICO's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

OSV-2020-1748 Use-of-uninitialized-value in transform_4x4_luma_add_8_fallback

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25619 Crash type: Use-of-uninitialized-value Crash state: transform4x4lumaadd8fallback void accelerationfunctions::transform4x4dstadd void transformcoefficients...