CVE Vulnerability Catalog

In mutt and neomutt, PGP encryption does not use the --hidden-recipient mode which may leak the Bcc email header field by inferring from the recipients info.

In mutt and neomutt the In-Reply-To email header field is not protected by cryptographic signing which allows an attacker to reuse an unencrypted but signed email message to impersonate the original sender.

In neomutt and mutt, the To and Cc email headers are not validated by cryptographic signing which allows an attacker that intercepts a message to change their value and include himself as a one of the recipients to compromise message confidentiality.

A flaw in Ansible-Core allows attackers to bypass unsafe content protections using the hostvars object to reference and execute templated content, leading to arbitrary code execution.

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_payload: sanitize offset and length before calling skb_checksum(). If access to offset + length is larger than the skbuff length, then skb_checksum() triggers BUG_ON().

A vulnerability in CloudPanel versions 2.0.0 through 2.4.2 allows low-privilege users to bypass access controls and gain unauthorized access to sensitive configuration files and administrative functionality.

An incorrect access control issue in the HomeServe Home Repair Android app version 3.3.4 allows a physically proximate attacker to escalate privileges via the fingerprint authentication function.

In the Linux kernel, an unbalanced locking issue exists in pc_clock_settime() in the posix-clock module. The error path fails to release the clk->rwsem read lock and does not fput the clockid's fd, resulting in unbalanced locking. The fix checks timespec64_valid_strict() before calling get_clock_desc().

In the Linux kernel, ALSA firewire-lib was fixed for a division by zero in apply_constraint_to_size(). The step variable is initialized to zero and if it is not changed in the loop it remains zero, leading to division by zero.

A vulnerability in the Bluetooth Low Energy implementation of Realtek RTL8762E BLE SDK version 1.4.0 allows an attacker to cause a Denial of Service (DoS) by sending a crafted ll_terminate_ind packet.

In the Linux kernel, a null-ptr-deref occurs in target_alloc_device() in the scsi target core. If allocating memory for dev queues fails, dev is freed but dev->transport is not initialized.

In the Linux kernel, a wild-memory-access occurs in proto_unregister related to the Bluetooth bnep module. bnep_init() ignores bnep_sock_init()'s return value, leading to issues when removing the module.

In the Linux kernel, there is a lack of validation of new SA's prefixlen using SA family when sel.family is unset. This can lead to improper validation and potential security issues.

In the Linux kernel, the nvme-pci driver has a race condition between reset and nvme_dev_disable(), where nvme_dev_disable() modifies dev->online_queues and nvme_pci_update_nr_queues() may use invalid values. This can lead to kernel warnings and potential instability.

In the Linux kernel, the drm/vboxvideo driver replaces a fake VLA at the end of vbva_mouse_pointer_shape with a real VLA to fix a field-spanning write warning during memcpy. This error could lead to memory corruption.

In the Linux kernel, a speculative execution issue exists with non-canonical address accesses on AMD Zen 5 CPUs. Due to AC bit renaming, the speculation window remains open, potentially leaking speculative data through a suitable gadget. This affects user address masking, valid_user_address() checks, and get_user() helpers.

In 1C-Bitrix Bitrix24 version 23.300.100, a vulnerability was found due to insufficiently protected credentials in DAV server settings. A remote administrator can read Exchange account passwords via an HTTP GET request.

In 1C-Bitrix Bitrix24 version 23.300.100, a vulnerability was found due to insufficiently protected credentials in SMTP server settings. A remote administrator can read SMTP account passwords via an HTTP GET request.

Insufficiently protected credentials in AD/LDAP server settings in 1C-Bitrix Bitrix24 23.300.100 allow remote administrators to send AD/LDAP administrators account passwords to an arbitrary server via HTTP POST request.

In 1C-Bitrix Bitrix24 version 23.300.100, a vulnerability was found due to insufficiently protected credentials in DAV server settings. A remote administrator can read proxy-server account passwords via an HTTP GET request.