CVE Vulnerability Catalog

A log spoofing flaw was found in the Tuned package due to improper sanitization of some API arguments. This flaw allows an attacker to pass a controlled sequence of characters; newlines can be inserted into the log. Instead of the 'evil' the attacker could mimic a valid TuneD log line and trick the administrator.

A SQL injection vulnerability was discovered in masterstack_imgcap v0.0.1 via the /submit endpoint. Attackers can manipulate database queries, potentially leading to unauthorized data access.

In the Linux kernel, ocfs2_setattr() uses uninitialized attr->ia_mode, attr->ia_uid, and attr->ia_gid in a trace point when the corresponding attributes are not set. This can lead to leaking uninitialized data or unpredictable behavior.

A vulnerability was found in Keycloak Server, making it vulnerable to denial of service due to improper handling of proxy headers. When configured to accept incoming proxy headers, it may accept non-IP values without validation, leading to costly DNS resolution operations that can tie up IO threads and cause DoS. The attacker must have access to a Keycloak instance configured to accept proxy headers, especially when reverse proxies do not overwrite incoming headers.

A flaw in Keycloak causes sensitive runtime values, such as passwords, to be captured during the build process and embedded as default values in bytecode, leading to unintended information disclosure. This affects direct environment variables in Keycloak 26 and indirect usage in earlier versions.

A vulnerability in the Keycloak-services package. If untrusted data is passed to the SearchQueryUtils method, it could lead to a denial of service (DoS) scenario by exhausting system resources due to a Regex complexity.

OpenShift Console is affected by a Server Side Request Forgery (SSRF) vulnerability. The /api/dev-console/proxy/internet endpoint allows authenticated users to have the console pod perform arbitrary, fully controlled HTTP(S) requests and returns the full response, despite its name suggesting internet-only requests.

A vulnerability was found in DataGear up to 4.60. It has been declared as critical. This vulnerability affects unknown code of the file /dataSet/resolveSql. The manipulation of the argument sql leads to sql injection. The attack can be initiated remotely. Upgrading to version 4.7.0 is able to address this issue. It is recommended to upgrade the affected component.

W podatności CVE-2024-7882 występuje niewłaściwa neutralizacja specjalnych elementów używanych w poleceniach SQL, co pozwala na atak typu SQL Injection w systemie e-Commerce firmy Special Minds Design and Software. Problem ten dotyczy wersji oprogramowania przed 22.11.2024.

A flaw was found in Avahi-daemon where DNS transaction IDs are initialized randomly only once at startup and then incremented sequentially. This predictable behavior facilitates DNS spoofing attacks, allowing attackers to guess transaction IDs.

A flaw in Avahi-daemon uses fixed source ports for wide-area DNS queries, making it easier for attackers to inject malicious DNS responses.

Podatność CVE-2024-7130 dotyczy niewłaściwej neutralizacji danych wejściowych podczas generowania stron internetowych w oprogramowaniu Kion Computer KION Exchange Programs, co umożliwia ataki typu Reflected XSS.

Podatność CVE-2024-7016 dotyczy niewłaściwej neutralizacji danych wejściowych podczas generowania stron internetowych w systemie Smart Doctor firmy Smarttek Informatics, co prowadzi do możliwości wystąpienia ataku typu Stored XSS, wymagającego uprawnień administratora.

A SQL injection vulnerability was discovered in SemCms v4.8 in the SEMCMS_SeoAndTag.php component. An attacker can exploit the ldgid parameter to execute arbitrary SQL code.

W podatności CVE-2024-11406 występuje niewłaściwa neutralizacja danych wejściowych podczas generowania stron internetowych w django CMS, co pozwala na ataki typu Stored XSS. Problem dotyczy pól atrybutów w django CMS w wersjach przed 4.0.

Podatność CVE-2024-11404 dotyczy django Filer, umożliwiając nieograniczone przesyłanie plików o niebezpiecznych typach oraz niewłaściwe neutralizowanie tagów HTML związanych z skryptami, co prowadzi do podatności na XSS. Problem ten występuje w wersjach od 3 do przed 3.3.

In the Linux kernel, a vulnerability was resolved in the idpf driver: the idpf_vc_core_init error path was fixed. When the platform running the device control plane is rebooted, the driver detects a reset, releases resources, and waits for completion. If the control plane is not yet started, the driver times out on the virtchnl message and retries establishing the mailbox. In the retry flow, the mailbox is deinitialized but the workqueue is still alive, leading to a null-ptr-deref.

In the Linux kernel, in the DRM driver for MediaTek, a potential NULL pointer dereference in mtk_crtc_destroy() was fixed. If mbox_request_channel() fails, the cmdq_client.chan pointer is set to NULL, and cmdq_pkt_create() is not called. During cleanup, the pointer must be checked for NULL before calling cmdq_pkt_destroy() to avoid a NULL pointer dereference.

In the Linux kernel, a vulnerability in the drm/i915/hdcp driver was resolved by adding an encoder check in intel_hdcp_get_capability. During hotplug or suspend/resume scenarios the encoder is not always initialized, which can lead to a kernel null pointer dereference.