CVE Vulnerability Catalog

A vulnerability was found in the Linux kernel's MPTCP implementation, related to improper handling of disconnect during TCP Fast Open. The bug can cause data stream corruption and trigger a warning in the __mptcp_clean_una function.

In the Linux kernel, the hid-thrustmaster driver has a type mismatch between a USB pipe and the transfer endpoint, triggering a warning in thrustmaster_probe. The fix adds an endpoint type check.

In the Linux kernel, a NULL pointer dereference occurs in the USB xhci driver on certain command aborts. If cur_cmd is NULL, xhci_mod_cmd_timer() crashes.

A soft lockup vulnerability was found in the Linux kernel during OOM (Out-Of-Memory) handling in cgroup. The issue occurs when a very large number of processes (e.g., 56,000) are in the OOM cgroup, causing traversal to take too long and blocking the system.

A race condition exists in the Linux kernel between a UDP socket's local address change (e.g., via connect()) and the rehash operation. During the brief period after the address change but before the secondary and four-tuple hashes are updated, a lookup may fail to find the socket, causing packet drops and ICMP port unreachable errors. This is observable when a UDP server calls connect() in response to the first datagram while a client concurrently sends subsequent packets.

A Server-Side Request Forgery (SSRF) vulnerability exists in the sort.php component of Emlog Pro v2.5.4. It allows an attacker to scan local and internal ports by supplying a crafted URL.

A cross-site scripting (XSS) vulnerability in Emlog Pro v2.5.4 allows attackers to inject malicious JavaScript or HTML via the postStrVar function in article_save.php.

A remote code execution (RCE) vulnerability was discovered in SeaCMS v13.3 in the admin_files.php component. Attackers can exploit this flaw to execute arbitrary code on the server.

A remote code execution (RCE) vulnerability was discovered in SeaCMS v13.3 within the admin_ip.php component. Attackers can exploit this flaw to execute arbitrary code on the server.

SeaCMS 13.3 was discovered to contain an arbitrary file read vulnerability in the file_get_contents function at admin_safe_file.php.

SeaCMS 13.3 was discovered to contain an arbitrary file read vulnerability in the file_get_contents function at admin_safe.php.

A remote code execution (RCE) vulnerability was discovered in SeaCMS v13.3 within the admin_smtp.php component. Attackers can exploit this flaw to execute arbitrary code on the server.

A remote code execution (RCE) vulnerability was discovered in SeaCMS v13.3 within the admin_template.php component. Attackers can exploit this flaw to execute arbitrary code on the server.

A remote code execution (RCE) vulnerability was discovered in SeaCMS v13.3 within the admin_ping.php component. Attackers can exploit this flaw to execute arbitrary code on the server.

A remote code execution (RCE) vulnerability was discovered in SeaCMS v13.3 in the admin_notify.php component. An attacker can exploit this flaw to execute arbitrary code on the server.

A remote code execution (RCE) vulnerability was discovered in SeaCMS v13.3 via the isopen parameter in admin_weixin.php. An attacker can send a crafted HTTP request to execute arbitrary code on the server.

In YZNCMS v2.0.1, an arbitrary file upload vulnerability exists in the plugin installation feature. It allows an attacker to execute arbitrary code by uploading a crafted ZIP file.

In the Linux kernel, a vulnerability was found in the in6_dump_addrs() function for IPv6, where rcu_dereference() was used without holding the rcu_read_lock(), causing a lockdep warning and potential synchronization issues.

In the Linux kernel, the pinctrl driver for Aspeed chips had a potential NULL pointer dereference in aspeed_pinmux_set_mux(). The fix adds a null check before dereferencing.

In the Linux kernel, the ath11k driver has a vulnerability that triggers a warning in mhi_pm_disable_transition() during firmware crash simulation. The issue arises from calling mhi_device_put() without a prior mhi_assert_dev_wake() when the MHI state is not normal, leading to a non-zero dev_wake counter and a warning.