CVE Vulnerability Catalog

In Tenable Security Center versions prior to 6.7.0, an improper access control vulnerability exists where an authenticated user could access areas outside of their authorized scope.

A fastjson deserialization vulnerability was discovered in WukongCRM-9.0-JAVA via the /OaExamine/setOaExamine interface. An attacker can remotely exploit this flaw to execute arbitrary code.

The 'zipfile' module in Python did not validate the offset value in the ZIP64 EOCD Locator record. Instead, it assumed the ZIP64 EOCD record is the previous record. This can be abused to create ZIP archives handled differently by 'zipfile' compared to other ZIP implementations. The fix maintains this behavior but checks that the offset matches the expected value.

A vulnerability has been found in SourceCodester Hotel and Lodge Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /del_curr.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed to the public and may be used.

In the Linux kernel, in the AMD display driver (drm/amd/display), the dm_resume function may dereference a NULL pointer if 'aconnector->dc_link' is null. The fix adds a check at the beginning of the loop to avoid this issue.

In the Linux kernel, in the AMDGPU driver, the amdgpu_bo_validate_size() function does not check whether the TTM domain manager for the requested memory exists, which can lead to a kernel oops when dereferencing 'man'. The fix adds a check that the manager pointer is not NULL.

The YoSmart YoLink API through 2025-10-02 uses an endpoint URL derived from a device's MAC address along with an MD5 hash of non-secret information, such as a key that begins with cf50.

A Directory Traversal vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) with firmware F/W 6010-0076-000 Ver 4.00 allows attackers to gain sensitive information.

A Cross Site Scripting (XSS) vulnerability has been found in EndRun Technologies Sonoma D12 Network Time Server (GPS) running F/W 6010-0071-000 Ver 4.00. Attackers can exploit it to steal sensitive information and possibly cause other unspecified impacts.

Podatność CVE-2025-0609 dotyczy niewłaściwej neutralizacji danych wejściowych podczas generowania stron internetowych w Logo Cloud od Logo Software Inc., co umożliwia ataki typu Cross-Site Scripting (XSS). Problem ten dotyczy wersji przed 1.18.

Podatność typu 'Open Redirect' w Logo Cloud firmy Logo Software Inc. umożliwia przekierowanie użytkowników na nieznane, potencjalnie złośliwe strony. Problem ten dotyczy wersji Logo Cloud przed 2025.R6.

W podatności CVE-2025-0607 występuje niewłaściwe kodowanie lub ucieczka danych wyjściowych w oprogramowaniu Logo Cloud firmy Logo Software Inc., co umożliwia ataki phishingowe. Problem dotyczy wersji Logo Cloud przed 2.57.

Podatność CVE-2025-0606 w oprogramowaniu Logo Cloud firmy Logo Software Inc. umożliwia obejście autoryzacji poprzez kontrolowany przez użytkownika klucz, co prowadzi do wymuszonego przeglądania oraz ujawnienia zasobów. Problem dotyczy wersji Logo Cloud przed 0.67.

A vulnerability was detected in zhuimengshaonian wisdom-education up to 1.0.4. The affected element is an unknown function of the file src/main/java/com/education/api/controller/student/WrongBookController.java. Performing manipulation of the argument subjectId results in authorization bypass. The attack can be initiated remotely. The exploit is now public and may be used.

ixmaps website2017 up to 0c71cffa0162186bc057a76766bc97e9f5a3a2d0 has an XSS vulnerability in /map.php within the HTTP GET Request Handler. Manipulating the trid argument results in cross-site scripting.

In the Linux kernel, the wifi: rtw88 driver fails to delete the TX purge timer and free the C2H queue when unloading, which can cause a crash or memory leak on driver unload.

In the Linux kernel, a vulnerability in the Btrfs filesystem related to the 'push_node_left' operation fails to log a move operation in the tree mod log. This can lead to a race condition during tree mod log rewind, potentially causing a kernel NULL pointer dereference and a system panic.

In the Linux kernel, a potential memory leak was found in the drm/amd driver. The issue occurs when the function returns NULL at the end, leaving allocated memory for clk_src unreleased. The fix replaces free with kfree.

A hung task vulnerability was found in the Linux kernel during LTP cgroup testing with repeated mount/unmount of perf_event and net_prio controllers. The issue occurs when work items are queued in a single cgroup_destroy_wq workqueue, causing a deadlock. The fix splits the workqueue into three dedicated ones: cgroup_offline_wq, cgroup_release_wq, and cgroup_free_wq.

In the Linux kernel's CCP driver (crypto: ccp), a NULL pointer dereference vulnerability occurs when __sev_platform_shutdown_locked() is called with a NULL argument. This issue manifests on the shutdown path during suspend to disk, causing an Oops error and potential system crash.