CVE Vulnerability Catalog

An issue was discovered in the Linux kernel through 6.0.9. drivers/media/dvb-core/dvbdev.c has a use-after-free, related to dvb_register_device dynamically allocating fops.

The vulnerability in Maarch RM 2.8.3 is due to improper restriction of excessive authentication attempts, manifested by overly verbose responses from the application. An unauthenticated remote attacker could exploit this flaw to perform brute-force attacks on user accounts.

Motyw Betheme dla WordPressa jest podatny na wstrzykiwanie obiektów PHP w wersjach do 26.5.1.4 włącznie, poprzez deserializację niezaufanych danych wejściowych dostarczanych przez parametry import, mfn-items-import-page oraz mfn-items-import. Umożliwia to uwierzytelnionym atakującym z uprawnieniami na poziomie subskrybenta i wyżej wstrzyknięcie obiektu PHP.

Karmasis Informatics Infraskope SIEM+ has an unauthenticated access vulnerability which could allow an unauthenticated attacker to obtain critical information.

Wtyczka Permalink Manager Lite dla WordPressa jest podatna na atak typu Cross-Site Request Forgery w wersjach do 2.2.20.1 włącznie. Problem wynika z braku lub nieprawidłowej walidacji nonce w funkcji extra_actions, co umożliwia nieautoryzowanym atakującym zmianę ustawień wtyczki, w tym permalinków i map witryn.

Karmasis Informatics Infraskope SIEM+ has an unauthenticated access vulnerability which could allow an unauthenticated attacker to modify logs.

A vulnerability in dynamic access policies (DAP) functionality of Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a device reload, resulting in a denial of service (DoS). This is due to improper processing of HostScan data from the Posture module. An attacker could exploit this by sending crafted HostScan data.

A vulnerability in the generic routing encapsulation (GRE) tunnel decapsulation feature of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS). This is due to a memory handling error when GRE traffic is processed. An attacker could exploit this by sending a crafted GRE payload, causing a device restart.

A vulnerability in the SSL/TLS client of Cisco ASA and FTD Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The issue is due to improper memory management when a device initiates SSL/TLS connections. An attacker could exploit this by ensuring the device connects to an SSL/TLS server using specific encryption parameters.

A vulnerability in the Simple Network Management Protocol (SNMP) feature of Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker to cause a denial of service (DoS). This is due to insufficient input validation. An attacker could exploit this by sending a crafted SNMP request, causing a device reload.

A vulnerability in the processing of SSH connections of Cisco Firepower Management Center (FMC) and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS). This is due to improper error handling when an SSH session fails. An attacker could exploit this by sending a high rate of crafted SSH connections, leading to resource exhaustion and reboot.

Wtyczka 'Follow Me Plugin' dla WordPressa jest podatna na atak typu Cross-Site Request Forgery w wersjach do 3.1.1 włącznie. Brak walidacji nonce w funkcji FollowMeIgniteSocialMedia_options_page() umożliwia nieautoryzowanym atakującym modyfikację ustawień wtyczki oraz wstrzykiwanie złośliwego JavaScriptu poprzez sfałszowane żądanie.

A Zip slip vulnerability in FileUtil.unzip in Liferay Portal 7.4.3.5 through 7.4.3.35 and Liferay DXP 7.4 update 1 through update 34 allows attackers to create or overwrite existing files on the filesystem via the deployment of a malicious plugin/module.

A ReDoS vulnerability in the LayoutPageTemplateEntryUpgradeProcess in Liferay Portal 7.3.2 through 7.4.3.4 and Liferay DXP 7.2 fix pack 9 through 18, 7.3 before update 4, and DXP 7.4 GA allows remote attackers to consume excessive server resources via a crafted payload injected into the 'name' field of a layout prototype.

A Zip slip vulnerability in the Elasticsearch Connector in Liferay Portal 7.3.3 through 7.4.3.18, and Liferay DXP 7.3 before update 6, and 7.4 before update 19 allows attackers to create or overwrite existing files on the filesystem via the installation of a malicious Elasticsearch Sidecar plugin.

A SQL injection vulnerability in the Layout module in Liferay Portal 7.1.3 through 7.4.3.4, and Liferay DXP 7.1 before fix pack 27, 7.2 before fix pack 17, 7.3 before service pack 3, and 7.4 GA allows remote authenticated attackers to execute arbitrary SQL commands via a crafted payload injected into a page template's 'Name' field.

Netatalk w wersji do 3.1.13 zawiera podatność typu przepełnienie bufora w stercie w funkcji afp_getappl, co może prowadzić do wykonania kodu poprzez spreparowany plik .appl. Umożliwia to zdalny dostęp z uprawnieniami roota na niektórych platformach, takich jak FreeBSD (używane w TrueNAS).

Time-of-check time-of-use race condition in BIOS firmware for some Intel processors. A privileged user may exploit it to escalate privileges via local access.