CVE Vulnerability Catalog

In the Linux kernel's LLC (Logical Link Control) subsystem, a vulnerability was found where skb_get() is used before dev_queue_xmit(). This causes the network buffer (skb) to be shared, which, with drivers not supporting IFF_TX_SKB_SHARING (e.g., e1000), leads to a kernel BUG and system crash.

In the Linux kernel, a vulnerability in the amd_get_mmconfig_range() function for x86 has been fixed. Xen does not offer MSR_FAM10H_MMIO_CONF_BASE to all guests, causing an unchecked MSR access warning. The fix uses rdmsr_safe() instead of rdmsr() to safely handle the missing access.

A vulnerability exists in Apache ActiveMQ Artemis that allows a user with permissions to create queues to modify the routing type of an address, even if they do not have permission to create that address. This could lead to sending messages with a routing type not supported by the address.

An OS command injection vulnerability was found in the AI (Artificial Intelligence) module for Drupal. The flaw affects versions before 1.0.5 and allows an attacker to execute arbitrary commands on the server.

In MISP before version 2.4.193, the menu_custom_right_link_html parameters can be set via the UI, allowing attackers with admin privileges to conduct XSS attacks on every page.

In MISP before version 2.4.193, the menu_custom_right_link parameters can be set via the UI, allowing attackers with admin privileges to conduct XSS attacks through a global menu link.

A vulnerability was found in the Infinispan component in Red Hat Data Grid. The REST compare API may have a buffer leak and an out of memory error can occur when sending continual requests with large POST data to the REST API.

A flaw was found in gnuplot. The X11_graphics() function may lead to a segmentation fault and cause a system crash.

A flaw was found in gnuplot. The CANVAS_text() function may lead to a segmentation fault and cause a system crash.

A flaw was found in gnuplot. The xstrftime() function may lead to a segmentation fault, causing a system crash.

A flaw was found in gnuplot. The GetAnnotateString() function may lead to a segmentation fault and cause a system crash.

A flaw was found in gnuplot. The plot3d_points() function may lead to a segmentation fault and cause a system crash.

A vulnerability was found in the Linux kernel's MPTCP implementation related to missing socket lock (msk socket lock) during address removal. This can cause a race condition and a lockdep warning, potentially leading to incorrect behavior or system crash.

Mbed TLS w wersjach przed 2.28.10 oraz 3.x przed 3.6.3 w niektórych przypadkach nieudanej alokacji pamięci lub błędów sprzętowych wykorzystuje niezainicjowaną pamięć stosu do tworzenia wiadomości TLS Finished, co może prowadzić do obejścia uwierzytelnienia, takiego jak ataki powtórzeniowe.

Mbed TLS w wersjach przed 2.28.10 oraz 3.x przed 3.6.3 na stronie klienta akceptuje serwery z zaufanymi certyfikatami dla dowolnych nazw hostów, chyba że aplikacja kliencka TLS wywoła funkcję mbedtls_ssl_set_hostname.

A stack overflow vulnerability was discovered in the Tenda W18E v2.0 running firmware v16.01.0.11, specifically in the wifiSSID parameter at the /goform/setModules endpoint. Attackers can cause a Denial of Service (DoS) by sending a crafted POST request.

Podatność CVE-2025-1496 w BG-TEK Coslat Hotspot umożliwia przeprowadzenie ataku typu brute force na hasła oraz nadużycie uwierzytelnienia. Problem dotyczy wersji przed 6.26.0.R.20250227.

W podatności CVE-2024-12136 w urządzeniu Elfatek Elektronics ANKA JPD-00028, przed wersją V.01.01, występuje brak krytycznego kroku w procesie uwierzytelniania, co umożliwia ominięcie uwierzytelnienia.

A flaw in the 389-ds-base LDAP Server occurs when the return value of a function is not checked during a Modify DN operation, leading to a NULL pointer dereference. A privileged user performing a MODDN operation after a failed operation can cause a Denial of Service (DoS) or system crash.

In Keylime 7.12.0, strict type checking prevents the registrar from reading database entries created by older versions (e.g., 7.11.0). Older versions store agent registration data as bytes, while the updated registrar expects str. This causes an exception when processing agent registration requests, making the agent fail.