CVE Vulnerability Catalog

Malicious scripts using repetitive JavaScript alerts could prevent client user interaction in some scenarios and allow for denial of service attacks. This vulnerability was fixed in Firefox for iOS 142.

Vulnerability in the URL scheme used by Firefox to facilitate searching of text queries could incorrectly allow attackers to open arbitrary website URLs or internal pages if a user was tricked into clicking a link. This vulnerability was fixed in Firefox for iOS 141.

In the Linux kernel, the ath12k Wi-Fi driver's ath12k_dp_tx_get_encap_type() uses the arvif parameter only to retrieve the ab pointer. During the vdev delete sequence, arvif->ar may become NULL, leading to a kernel panic. Since the caller ath12k_dp_tx() already has a valid ab pointer, passing it directly avoids the panic and unnecessary dereferencing.

In the Linux kernel's drm/rockchip vop2 driver, binding iterates windows to find a primary-plane usable by a video-port but does not verify that one was found. A missing primary plane leads to a NULL pointer dereference, as exposed on rk3576 vp2.

A vulnerability in the Linux kernel's BPF subsystem causes a kernel warning when performing narrower access to pointer fields in context structures. The issue occurs when a BPF program reads fewer bytes than the pointer field size, leading to a context access conversion error.

The Cookies and Content Security Policy plugin up to version 2.29 has an access control flaw in an AJAX endpoint. Unauthenticated remote attackers can cause a denial of service by performing unlimited database write operations via the wp_ajax_nopriv_cacsp_insert_consent_data endpoint.

In the Linux kernel, the ksmbd server lacks a call to rcu_barrier() during module unload, which can lead to a race condition and unintended execution of kernel code locally, bypassing protections such as Kernel Lockdown.

In the Linux kernel, the rxrpc subsystem has a prealloc collision bug. When userspace uses AF_RXRPC as a server, it preallocates incoming calls and assigns call IDs; attempting to preallocate a call with an in-use ID should return EBADSLT, but error handling triggers assertions in rxrpc_cleanup_call() because the call isn't marked complete or released. The fix sets the call state and marks it as being released before calling cleanup.

In the Linux kernel iio: common: st_sensors module, the device struct is used before initialization in probe functions. This causes a kernel panic in st_sensors_power_enable() when devm_regulator_bulk_get_enable() fails and calls dev_err_probe() with an uninitialized device. The fix corrects the use of uninitialized structs.

In the Linux kernel, the HID nintendo driver can stall or panic the kernel when using Bluetooth-connected controllers. A new state JOYCON_CTLR_STATE_SUSPENDED is set in the newly added nintendo_hid_suspend to avoid stalling the kernel waiting for input reports during suspend. Also, joycon_init() is not called for Bluetooth controllers in the nintendo_hid_resume path because connectivity is lost during suspend.

An XSS vulnerability in OURPHP up to version 8.6.1 allows an attacker to inject malicious script via the "Name" field in the "Complete Profile" functionality on the "My User Center" page. The attack requires prior registration through the front-end interface.

The Lotus Cars Android app (com.lotus.carsdomestic.intl) version 1.2.8 has allowBackup=true set in its manifest, allowing data exfiltration via ADB backup on rooted or debug-enabled devices. This poses a risk of user data exposure.

The Lotus Cars Android app (version 1.2.8) exposes the PushDeepLinkActivity component without authentication, accessible via ADB or malicious apps. This allows unauthorized access to internal app mechanisms, potentially leading to denial of service or logic abuse.

The WordPress theme "App, SaaS & Software Startup Tech Theme - Stratus" by Pixel Makers Creative INC. contains a Missing Authorization vulnerability that allows exploitation of incorrectly configured access control security levels. The issue affects versions from n/a before 4.2.11.

EyouCMS 1.7.3 is vulnerable to Cross Site Scripting (XSS) in index.php, which can be exploited to obtain sensitive information.

A vulnerability in the IKEv2 module of Cisco Secure Firewall ASA and FTD software could allow an unauthenticated, remote attacker to trigger a memory leak, resulting in a denial of service (DoS) condition. The issue is due to improper parsing of IKEv2 packets.

An XSS vulnerability in the /tasks endpoint of hortusfox-web v4.4 allows attackers to inject malicious JavaScript via the title parameter. The attack can be executed without authentication if the endpoint does not require authorization.

An XSS vulnerability in the /controller/admin.php endpoint of hortusfox-web v4.4 allows attackers to inject malicious JavaScript via the email parameter, which executes in the victim's browser.

An XSS vulnerability in the /Calendar endpoint of hortusfox-web v4.4 allows attackers to inject malicious JavaScript via the add function, executing in the victim's browser.

An Integer Overflow vulnerability exists in FortiOS, FortiProxy, and FortiPAM that may allow an authenticated user to affect the device's SSL-VPN availability via crafted requests.