CVE Vulnerability Catalog

In the Linux kernel, an unnecessary synchronize_net() call was removed from the ipv6_mc_down() function. This call caused delays from 200 microseconds to 5 milliseconds under load.

A deadlock exists in the Linux kernel net/sched subsystem. When the mirred action is used on a classful egress qdisc and a packet is mirrored or redirected to self, the same qdisc lock is acquired recursively on the same CPU. The fix adds an owner field (CPU id) to struct Qdisc and drops the packet when re-entered from the same CPU.

In the Linux kernel, in the DRM subsystem for AMD Display, a NULL check was added for the dc_state pointer before releasing it in dc_state_release. The fix prevents a potential NULL pointer dereference during state release.

In the Linux kernel, the SCSI qla2xxx driver has a memory leak in __qlt_24xx_handle_abts(). A previous fix added an early return when a command was not found but failed to free the allocated memory for the management command.

In the Linux kernel, the gma500 graphics driver (drm/gma500) has a bug where a destroyed mutex object is used during psb_gem_unpin(). This triggers a WARN_ON(lock->magic != lock) warning and may lead to system instability. The fix moves the drm_gem_object_release() call after the unpin operation.

Cross Site Scripting vulnerability in Lavalite CMS v.10.1.0 allows attackers to execute arbitrary code and obtain sensitive information via a crafted payload to the URL.

Incorrect access control in ASUS RT-N12+ B1 and RT-N12 D1 routers allows local attackers to obtain root terminal access via the UART interface.

The Asus RT-N12+ B1 router stores credentials in cleartext, which could allow local attackers to obtain unauthorized access and modify router settings.

A CSV Injection vulnerability in the Asus RT-N12+ router allows an administrator to inject arbitrary commands or formulas into the client name parameter. When exported to CSV format, the injected code can be executed in another user's session upon opening the file.

A flaw in the RESTEasy Reactive implementation in Quarkus causes security checks for some JAX-RS endpoints to be performed after serialization, consuming more processing resources during HTTP request checks. In certain configurations, an attacker knowing POST, PUT, or PATCH request paths can potentially overload vulnerable endpoints, leading to denial of service.

A flaw in SAML client registration in Keycloak allows an administrator to register malicious JavaScript URIs as Assertion Consumer Service POST Binding URLs (ACS), posing a Cross-Site Scripting (XSS) risk. This may allow a malicious admin in one realm or a client with registration access to target users in different realms or applications, executing arbitrary JavaScript in their contexts upon form submission.

A log injection flaw was found in Keycloak. A text string may be injected through the authentication form when using the WebAuthn authentication mode. This issue may have a minor impact to the logs integrity.

A vulnerability in the restore functionality of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system with root-level privileges. Administrator-level privileges are required. The issue is due to improper sanitization of backup file contents during restore. An attacker could exploit this by restoring a crafted backup file.

A Cross Site Scripting (XSS) vulnerability in Innovaphone myPBX versions v.14r1, v.13r3, and v.12r2 allows a remote attacker to execute arbitrary code via the query parameter to the /CMD0/xml_modes.xml endpoint.

In WUZHICMS v4.1.0, a stored XSS vulnerability exists in the /affiche/admin/index.php component. Attackers can inject arbitrary scripts or HTML via the $formdata parameter.

CMSeasy version 7.7.7.9 is vulnerable to arbitrary file deletion. An attacker can exploit this vulnerability to delete critical system files.

W jądrze systemu Linux zidentyfikowano i naprawiono podatność, która mogła prowadzić do zakleszczenia (deadlock) podczas próby użycia sock_lock w funkcji .recvmsg. Zamiast tego zastosowano sk_receive_queue.lock w bt_sock_ioctl, aby uniknąć problemu z użyciem po zwolnieniu (UAF).

The SiteGround Speed Optimizer WordPress plugin up to version 7.4.6 has a missing authorization vulnerability that could allow unauthorized users to perform certain operations.

The PeproDev Ultimate Invoice WordPress plugin (by Pepro Dev. Group) up to version 2.0.0 has a missing authorization vulnerability that could allow unauthorized users to perform certain operations.