12174 matches found
Red Hat openshift-ansible SSL Client Certificate Authentication Vulnerability
Red Hat OpenShift is a Platform-as-a-Service PaaS cloud computing platform from Red Hat, Inc. that builds, tests, deploys, and runs applications. openshift-ansible is one of the tools for installing, upgrading, and managing OpenShift. A security vulnerability exists in Red Hat openshift-ansible...
graphicsmagick/coder_MAT_fuzzer: Use-of-uninitialized-value in WriteBlob
Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5710480829054976 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderMATfuzzer Fuzz target binary: coderMATfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type:...
PT-2018-10637 · Woocommerce · Advanced Order Export For Woocommerce
Name of the Vulnerable Software and Affected Versions: Advanced Order Export For WooCommerce versions 1.5.4 and earlier Description: The issue concerns a CSV Injection vulnerability. Recommendations: For versions 1.5.4 and earlier, update to a version later than 1.5.4 to resolve the issue...
skia/skottie_json: Use-of-uninitialized-value in skjson::Value::getType
Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5183875717267456 Project: skia Fuzzer: libFuzzerskiaskottiejson Fuzz target binary: skottiejson Job Type: libfuzzermsanskia Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...
graphicsmagick/coder_PNG_fuzzer: Use-of-uninitialized-value in ReadPNGImage
Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5146983567196160 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderPNGfuzzer Fuzz target binary: coderPNGfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type:...
CVE-2018-12454
The addguess function of a simplelottery smart contract implementation for 1000 Guess, an Ethereum gambling game, generates a random value with publicly readable variables such as the current block information and a private variable which can be read with a getStorageAt call. Therefore, it allows...
CVE-2018-12454
The addguess function of a simplelottery smart contract implementation for 1000 Guess, an Ethereum gambling game, generates a random value with publicly readable variables such as the current block information and a private variable which can be read with a getStorageAt call. Therefore, it allows...
skia/skottie_json: Use-of-uninitialized-value in skjson::is_sterminator
Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5272058106740736 Project: skia Fuzzer: libFuzzerskiaskottiejson Fuzz target binary: skottiejson Job Type: libfuzzermsanskia Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...
skia/skottie_json: Use-of-uninitialized-value in skjson::is_ws
Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5687921586733056 Project: skia Fuzzer: libFuzzerskiaskottiejson Fuzz target binary: skottiejson Job Type: libfuzzermsanskia Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...
yara/dex_fuzzer: Use-of-uninitialized-value in read_uleb128
Project: https://github.com/VirusTotal/yara.git Detailed report: https://oss-fuzz.com/testcase?key=5072572086484992 Project: yara Fuzzer: libFuzzeryaradexfuzzer Fuzz target binary: dexfuzzer Job Type: libfuzzermsanyara Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...
graphicsmagick/coder_BIGTIFF_fuzzer: Use-of-uninitialized-value in DisassociateAlphaRegion
Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=4781271438852096 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderBIGTIFFfuzzer Fuzz target binary: coderBIGTIFFfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash...
imagemagick/encoder_dng_fuzzer: Use-of-uninitialized-value in LibRaw::ahd_interpolate_r_and_b_in_rgb_and_convert_to_cielab
Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=4845879373594624 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderdngfuzzer Fuzz target binary: encoderdngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...
Security update for bouncycastle (moderate)
This update for bouncycastle to version 1.59 fixes the following issues: These security issues were fixed: - CVE-2017-13098: BouncyCastle, when configured to use the JCE Java Cryptography Extension for cryptographic functions, provided a weak Bleichenbacher oracle when any TLS cipher suite using...
Authorization Bypass
symfony is vulnerable to authorization bypasses. A malicious user can pass a valid username and a null value as the password to gain unauthorized access to another user's account...
capstone/fuzz_disasmmaster: Use-of-uninitialized-value in isPrefixAtLocation
Detailed report: https://oss-fuzz.com/testcase?key=5120790969188352 Project: capstone Fuzzer: libFuzzercapstonefuzzdisasmmaster Fuzz target binary: fuzzdisasmmaster Job Type: libfuzzermsancapstone Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...
capstone/fuzz_disasmnext: Use-of-uninitialized-value in EVM_insn_name
Detailed report: https://oss-fuzz.com/testcase?key=5135182867726336 Project: capstone Fuzzer: libFuzzercapstonefuzzdisasmnext Fuzz target binary: fuzzdisasmnext Job Type: libfuzzermsancapstone Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: EVMinsnname...
poppler/pdf_fuzzer: Use-of-uninitialized-value in FoFiType1C::readPrivateDict
Project: https://anongit.freedesktop.org/git/poppler/poppler.git https://gitlab.freedesktop.org/poppler/poppler.git https://gitlab.freedesktop.org/ceyhunalp/poppler.git Detailed report: https://oss-fuzz.com/testcase?key=5726751580749824 Project: poppler Fuzzer: libFuzzerpopplerpdffuzzer Fuzz targ...
CVE-2018-0732 Client DoS due to large DH parameter
During key agreement in a TLS handshake using a DHE based ciphersuite a malicious server can send a very large prime value to the client. This will cause the client to spend an unreasonably long period of time generating a key for this prime resulting in a hang until the client has finished. This...
