CVE Vulnerability Catalog

PRTG Network Monitor before 23.1.82 allows remote attackers to write to files via the FTP Server Count Sensor.

PRTG Network Monitor before 23.1.82 allows remote attackers to write to files via the HTTP XML/REST Sensor.

In Oraios AI Serena before 1.0.0, the listen address of the MCP server in HTTP mode is 0.0.0.0. The Supplier observed that 0.0.0.0 was a "potential security hazard" but the Serena documentation, at the time of the issue report proposing 127.0.0.1 instead of 0.0.0.0, recommended "use a sandboxed environment for running Serena."

An issue was discovered in NR RRC and L2 in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 1680, W920, W930, W1000, and Modem 5410. In the 5G baseband, a NULL Pointer Dereference occurs when processing a malformed RRC Reconfiguration message.

In the camera driver of Samsung Exynos 1330, 1380, 1480, 2400, 1580, 2500, 2600, and 1680 processors, a Time-of-Check Time-of-Use (TOCTOU) race condition leads to out-of-bounds access.

In the camera driver of Samsung Exynos 1330, 1380, 1480, 2400, 1580, 2500, 2600, and 1680 processors, an out-of-bounds array access vulnerability in the error-handling path leads to memory corruption.

In the camera driver of Samsung Exynos 1330, 1380, 1480, 2400, 1580, 2500, 2600, and 1680 processors, an information leak occurs due to insertion of sensitive information into debugging code.

In GPAC up to f1219cde, a vulnerability was found in the function stbl_GetSampleInfos of file isomedia/stbl_read.c in the MP4Box component. The manipulation results in a reachable assertion, the attack requires local access, and the exploit has been publicly released.

In GPAC up to f1219cde, a vulnerability was identified in the function gf_sm_dump_command_list of file scene_manager/scene_dump.c in the MP4Box component. The manipulation leads to a reachable assertion, the attack requires local access, and the exploit is publicly available.

In GPAC up to f1219cde, a vulnerability was determined in the function xmt_parse_element of file scene_manager/loader_xmt.c in the MP4Box component. The manipulation leads to a reachable assertion, the attack is restricted to local execution, and the exploit has been publicly disclosed.

In GPAC up to f1219cde, a vulnerability was found in the function gf_svg_attributes_copy of file scenegraph/svg_attributes.c in the MP4Box component. The manipulation results in a buffer over-read, the attack is only possible with local access, and the exploit has been made public.

In the Wi-Fi module of Samsung Exynos 850, 1280, 1330, 1380, 1480, 2400, W920, and W930 processors, a malformed Netlink command can trigger an out-of-bounds read, potentially leading to information leakage.

In Samsung Exynos 1330, 1380, 1480, 1580, 1680, W920, W930, and W1000 processors, a malformed ioctl command to the Wi-Fi interface device can lead to improper buffer size allocation, resulting in an out-of-bounds write and causing a denial of service (DoS).

In the camera driver of Samsung Exynos 1330, 1380, 1480, 2400, 1580, and 2500 processors, sending a malformed message to the test_msg sysfs entry causes an out-of-bounds write, leading to a denial of service.

A vulnerability was discovered in Samsung Exynos 1330, 1380, 1480, and 2400 mobile processors. An out-of-bounds memory access in the camera GDC driver may lead to kernel memory corruption under certain conditions.

A vulnerability was found in GPAC up to f1219cde. An unknown function in scenegraph/vrml_tools.c of the MP4Box component leads to a null pointer dereference. The attack can only be performed locally, and the exploit has been publicly disclosed.

An issue was discovered in the DPU of Samsung Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500, 1680, and 2600 mobile processors. A TOCTOU race condition in the Exynos DRM HDR driver leads to a heap overflow, causing a kernel crash.

libarchive 3.8.x before 3.8.2 has a strcpy heap-based buffer overflow in the gzip writer via the original-filename field to archive_compressor_gzip_open in archive_write_add_filter_gzip.c (GHSA-92wx-p669-8gr9). This relates to bsdtar. Exploitation requires obtaining original-filename from an untrusted party.

A security flaw has been discovered in Totolink A3002MU Hh-B20211125.1046. It affects an unknown part of the Anchor Tag Handler component and results in cross site scripting. Remote exploitation is possible, and the exploit has been publicly released.

A vulnerability was determined in Anil-matcha Open-Generative-AI up to 1.0.11/2.0.0 in the renderHistory function of ImageStudio.js of the Studio Components. This manipulation causes cross-site scripting (XSS). The attack may be initiated remotely. The pull request to fix this issue awaits acceptance.