CVE Vulnerability Catalog

W podatności CVE-2025-8079 występuje niewłaściwa neutralizacja danych wejściowych podczas generowania stron internetowych w oprogramowaniu Smart Trade E-Commerce, co pozwala na ataki typu Reflected XSS. Problem dotyczy wersji przed 4.5.0.0.1.

Podatność CVE-2025-0875 dotyczy systemu OBS (System Informacji o Sprawach Studenckich) firmy PROLIZ, umożliwiając obejście autoryzacji poprzez wstrzykiwanie parametrów. Problem ten występuje w wersjach przed v26.0328.

A vulnerability was found in MuYuCMS up to 2.7 in an unknown function of /index/index.html within the Add Fiend Link Handler component. Manipulating the Link URL argument results in server-side request forgery (SSRF).

In Artifex GhostXPS before version 10.06.0, there is a stack-based buffer overflow in xps_unpredict_tiff in xpstiff.c because the samplesperpixel value is not checked. This can lead to crashes or potential code execution.

A vulnerability was found in h2oai h2o-3 up to version 3.46.08. The impacted element is an unknown function of the /99/ImportSQLTable file related to the IBMDB2 JDBC Driver component. Manipulation of the connection_url argument causes deserialization, and the attack can be initiated remotely. The exploit has been publicly disclosed and may be used.

In academico-sis academico up to commit d9a9e2636fbf7e5845ee086bcb03ca62faceb6ab, the /edit-photo file in the Profile Picture Handler component allows unrestricted file upload that can be exploited remotely. The exploit has been publicly disclosed and the vendor did not respond to the disclosure.

A server-side request forgery flaw was found in Harness 3.3.0 in the LookupRepo function of app/api/controller/gitspace/lookup_repo.go. Manipulating the url argument can lead to SSRF. The exploit has been published and the vendor did not respond.

The Commerce component in Liferay Portal 7.3.0 through 7.4.3.112 and Liferay DXP in specified versions saves virtual products uploaded to Documents and Media with guest view permission. This allows remote attackers to access and download virtual products for free via a crafted URL.

A Cross-Site Request Forgery (CSRF) vulnerability exists in the server (license) registration page in Liferay Portal 7.4.0 through 7.4.3.111 and older unsupported versions, as well as Liferay DXP 2023.Q4.0 through 2023.Q4.7, 2023.Q3.1 through 2023.Q3.9, and 7.4 GA through update 92. A remote attacker can register a server license via the 'orderUuid' parameter.

Insecure direct object reference (IDOR) vulnerability in the Contacts Center widget in Liferay Portal 7.4.0 through 7.4.3.119, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.6, 2023.Q3.1 through 2023.Q3.10, 7.4 GA through update 92, and older unsupported versions allows remote attackers to view contact information, including the contact’s name and email address, via the _com_liferay_contacts_web_portlet_ContactsCenterPortlet_entryId parameter.

The SKTLab Mukbee app version 1.01.196 on Android has a vulnerability in an unknown function of the AndroidManifest.xml file of the com.dw.android.mukbee component, resulting in improper export of Android application components. The attack must be initiated locally, and the exploit is now public and may be used. The vendor was contacted but did not respond.

In the Linux kernel, a NULL pointer dereference exists in tee_shm_put. The function __optee_disable_shm_cache may pass NULL to tee_shm_free, causing a kernel oops during shutdown or hibernation. The fix adds a NULL check in tee_shm_put.

In the Linux kernel, the mlx4 driver's mlx4_en_create_rx_ring checks the result of page_pool_create() for NULL instead of using IS_ERR(). Since the function returns error pointers (ERR_PTR), this can lead to an invalid pointer dereference.

In the Linux kernel, the am65-cpsw-nuss driver has a NULL pointer dereference for ndev in the TX completion stage on TI SoCs with the CPSW2G instance. If no TX packets have been processed, ndev is not initialized, leading to a NULL dereference and kernel crash. The fix adds a check on the number of processed TX packets.

A memory leak exists in the Linux kernel's TCP-AO failure handling for IPv6. When tcp_ao_copy_all_matching() fails in tcp_v6_syn_recv_sock(), the function exits without releasing socket resources, causing a memory leak. The fix aligns error handling in tcp_v4_syn_recv_sock and tcp_v6_syn_recv_sock to ensure proper socket cleanup.

In the Linux kernel, the {arp,neigh}_reduce() functions in the VXLAN driver contain a NULL pointer dereference (NPD) when the proxy option is enabled and the FDB entry for a neighbor's MAC address points to an FDB nexthop group instead of a valid remote destination. The code assumes a valid remote destination exists, leading to a kernel crash when sending ARP requests or IPv6 Neighbor Solicitation messages.

In the Linux kernel, a memory leak exists in pad_compress_skb(). If alloc_skb() fails, the function returns NULL without releasing the old skb, leading to a lost reference and memory leak because the caller does not free the original skb.

In the Linux kernel, a NULL pointer dereference exists in __iodyn_find_io_region(). The result of pcmcia_make_resource() is assigned to res and used in pci_bus_alloc_resource() without checking, which could lead to a NULL pointer dereference on failure of pcmcia_make_resource().

In the Linux kernel, ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() were defined to ensure proper page table synchronization when calling p*d_populate_kernel(). The fix addresses intermittent boot failures on systems with 4-level paging and large persistent memory, as well as a crash in vmemmap_set_pmd() caused by accessing vmemmap before sync_global_pgds().