CVE Vulnerability Catalog

Reactor Netty HTTP Server, in versions 1.0.11 - 1.0.23, may log request headers in some cases of invalid HTTP requests. The logged headers may reveal valid access tokens to those with access to server logs. This may affect only invalid HTTP requests where logging at WARN level is enabled.

A use-after-free flaw was found in the Linux kernel's networking code, specifically in the sch_sfb enqueue function. The function used the socket buffer (SKB) cb field after the same SKB had already been enqueued and freed into a child qdisc. This allows a local, unprivileged user to crash the system.

A Cross-site scripting (XSS) vulnerability in the Document and Media module - file upload functionality in Liferay Digital Experience Platform 7.3.10 SP3 allows remote attackers to inject arbitrary JS script or HTML into the description field of uploaded SVG file.

A Cross-site scripting (XSS) vulnerability in the Frontend Taglib module in Liferay Portal 7.3.2 through 7.4.3.16, and Liferay DXP 7.3 before update 6, and 7.4 before update 17 allows remote attackers to inject arbitrary web script or HTML.

A Cross-site scripting (XSS) vulnerability in the Frontend Editor module's integration with CKEditor in Liferay Portal 7.3.2 through 7.4.3.14, and Liferay DXP 7.3 before update 6, and 7.4 before update 15 allows remote attackers to inject arbitrary web script or HTML via the name or namespace parameter.

Cross-site scripting (XSS) vulnerability in the Object module of Liferay Portal 7.4.3.4 through 7.4.3.36. Remote attackers can inject arbitrary web script or HTML via the `Label` text field on the edit object details page.

A cross-site scripting (XSS) vulnerability in the Role module's edit role assignees page in Liferay Portal and DXP allows remote attackers to inject arbitrary web script or HTML.

A Cross-site scripting (XSS) vulnerability in the Document Library module in Liferay Portal 7.4.3.30 through 7.4.3.36, and Liferay DXP 7.4 update 30 through 36. Remote attackers can inject arbitrary web script or HTML via the `redirect` parameter.

A Cross-site scripting (XSS) vulnerability in the Portal Search module's Sort widget in Liferay Portal 7.2.0 through 7.4.3.24, and Liferay DXP 7.2 before fix pack 19, 7.3 before update 5, and DXP 7.4 before update 25 allows remote attackers to inject arbitrary web script or HTML via a crafted payload.

A vulnerability was found in the Linux Kernel in the intr_callback function of the file drivers/net/usb/r8152.c, related to the BPF component. The manipulation leads to logging of excessive data. The attack can be launched remotely. It is recommended to apply a patch to fix this issue.

A vulnerability was identified in Linux Kernel up to 4.19.316/5.4.278/5.10.220/5.15.161. This impacts the function tcp_getsockopt/tcp_setsockopt of the component TCP Handler. Such manipulation leads to race condition. A high complexity level is associated with this attack. The exploitability is said to be difficult.

In the Linux kernel, in the Bluetooth component in the file drivers/isdn/mISDN/l1oip_core.c, the del_timer function is vulnerable to use-after-free. The vulnerability has been classified as critical.

A vulnerability classified as critical was found in the Linux Kernel in the l2cap_reassemble_sdu function of the file net/bluetooth/l2cap_core.c, related to the Bluetooth component. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue.

A broken session control was discovered in devhub version 0.102.0, which could allow an attacker to hijack user sessions.

A critical vulnerability was found in the Linux kernel in the area_cache_get function of drivers/net/ethernet/netronome/nfp/nfpcore/nfp_cppcore.c, in the IPsec component. The manipulation leads to use after free. Applying a patch is recommended to fix this issue.

In the Linux kernel up to versions 5.10.162/5.15.85/6.0.15/6.1.1, a vulnerability was found in the libbpf component, in the btf_dump_name_dups function of tools/lib/bpf/btf_dump.c. Manipulation leads to a use-after-free. The issue is fixed in versions 5.10.163, 5.15.86, 6.0.16, 6.1.2, and 6.2.

A vulnerability was found in the Linux kernel in the ipv6_renew_options function of the IPv6 Handler component. The manipulation leads to a memory leak, and the attack can be launched remotely. Applying a patch is recommended to fix this issue.

In the Linux kernel 5.8 through 5.19.x before 5.19.16, a local attacker able to inject WLAN frames into the mac80211 stack could cause a NULL pointer dereference denial-of-service attack against beacon protection of P2P devices.

A list management bug in BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 could be used by local attackers (able to inject WLAN frames) to corrupt a linked list and potentially execute code.

A Cross-site scripting (XSS) vulnerability was found in the Blog module of Liferay Digital Experience Platform 7.3.10 SP3. It allows remote attackers to inject arbitrary JS or HTML into the name field of a new topic.