CVE Vulnerability Catalog

The z-order of browser windows could be manipulated to hide the fullscreen notification, potentially enabling spoofing attacks. Fixed in Firefox 135 and Thunderbird 135.

The fullscreen notification is prematurely hidden when fullscreen is re-requested quickly by the user. This could have been leveraged to perform a potential spoofing attack. This vulnerability was fixed in Firefox 135 and Thunderbird 135.

A race condition could have led to private browsing tabs being opened in normal browsing windows. This could have resulted in a potential privacy leak. This vulnerability was fixed in Firefox 135, Firefox ESR 128.7, Thunderbird 128.7, and Thunderbird 135.

The Python standard library functions `urllib.parse.urlsplit` and `urlparse` accept domain names with square brackets, which is invalid per RFC 3986. Square brackets are only meant as delimiters for IPv6 and IPvFuture hosts. This can cause differential parsing between Python's URL parser and other compliant parsers.

In the Linux kernel, a bug in the mac802154 module allows removal of an IEEE 802.15.4 network interface after unregistering the hardware device, leading to list corruption and a kernel BUG. The vulnerability arises from missing checks on local interfaces before deleting the sdata list. It has been fixed by adding the necessary check.

A flaw in the Wildfly Server Role Based Access Control (RBAC) provider allows a user without the required privileges to suspend or resume the server. A user with a Monitor or Auditor role is supposed to have only read access permissions and should not be able to suspend the server. The vulnerability is caused by the Suspend and Resume handlers not performing authorization checks.

A vulnerability was found in CRI-O. A path traversal issue in the log management functions (UnMountPodLogs and LinkContainerLogs) may allow an attacker with permissions to create and delete Pods to unmount arbitrary host paths, leading to node-level denial of service by unmounting critical system directories.

Edimax AC1200 Wi-Fi 5 Dual-Band Router BR-6476AC version 1.06 is vulnerable to Cross-Site Scripting (XSS) in the management interface via /bin/goahead. The vulnerability exists in endpoints /goform/setStaticRoute, /goform/fromSetFilterUrlFilter, and /goform/fromSetFilterClientFilter.

A persistent cross-site scripting (XSS) vulnerability was found in NodeBB v3.11.0. An attacker can store arbitrary JavaScript code in the 'About Me' section of their profile.

W podatności CVE-2024-10539 występuje niewłaściwa neutralizacja danych wejściowych podczas generowania stron internetowych w systemie Uyumsoft ERP, co pozwala na ataki typu XSS (Cross-site Scripting) przy użyciu nieprawidłowych znaków. Problem dotyczy wersji Uyumsoft ERP przed Erp4.2109.166p45.

A stored cross-site scripting (XSS) vulnerability in Umbraco CMS v14.3.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. NOTE: This has been disputed by the vendor since this potential attack is only possible via authenticated users who have been manually allowed access to the CMS. There was a deliberate decision made not to apply HTML sanitization at the product level.

A flaw was found in Keycloak where when an Active Directory user resets their password, the system updates it without performing an LDAP bind to validate the new credentials. This allows users with expired or disabled AD accounts to regain access in Keycloak, bypassing AD restrictions.

An uninitialized pointer dereference in the ngap_handle_pdu_session_resource_setup_response routine of OpenAirInterface CN5G AMF (oai-cn5g-amf) up to v2.0.0 allows attackers to cause a Denial of Service (DoS) via a crafted PDU Session Resource Setup Response.

In multiple locations, there is a possible way to access media content belonging to another user due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.

A null dereference vulnerability in OpenAirInterface CN5G AMF (oai-cn5g-amf) version 2.0.0 and earlier occurs when handling unsupported NGAP protocol messages. An attacker with network-adjacent access can trigger a denial of service.

In the Linux kernel, the btrfs subsystem lacks a check for a valid extent tree, leading to a NULL pointer dereference during scrub operations. The vulnerability can be triggered on a corrupted filesystem image mounted with rescue=all,ro, causing a kernel oops.

In the Linux kernel, the hwmon (drivetemp) driver passes positive SCSI error codes from scsi_execute_cmd() to the hwmon core, which only checks for negative error codes. This leads to reporting uninitialized data to userspace when SCSI errors occur (e.g., disk disconnection). The fix checks the output and returns -EIO for positive error codes.

In the Linux kernel, exfat_readdir() can enter an infinite loop when the exFAT filesystem is corrupted such that a cluster is linked to itself in the cluster chain and there is an unused directory entry in the cluster. The 'dentry' pointer is then not incremented, so the condition 'dentry < max_dentries' cannot prevent the infinite loop. This loop causes s_lock not to be released, and other tasks such as exfat_sync_fs() hang.

IBM DevOps Velocity 5.0.0 and IBM UrbanCode Velocity 4.0.0 through 4.0.25 store web pages locally, allowing another system user to read them.