CVE Vulnerability Catalog

An RBAC authorization risk in Carina v0.13.0 and earlier allows local attackers to execute arbitrary code via crafted commands, enabling them to obtain the entire cluster's secrets and take over the cluster.

A vulnerability was found in Wildfly's management interface. Due to the lack of limitation of sockets for the management interface, it may be possible to cause a denial of service hitting the nofile limit as there is no possibility to configure or set a maximum number of connections.

The Windows kernel module 'ACE-BASE.sys' version 1.0.2202.6217 of Anti-Cheat Expert does not perform proper access control when handling system resources. This allows a local attacker to escalate privileges from regular user to System or PPL level.

W jądrze systemu Linux rozwiązano podatność związaną z pstore, gdzie niewłaściwe użycie funkcji d_drop() i dput() prowadziło do problemów z liczeniem referencji. Zamiast tego, powinno się używać d_invalidate().

In the Linux kernel, the iwlwifi (mvm subsystem) driver has a vulnerability where the TX queue for the offloading TID is not guaranteed to exist during resume. In the rare case that no packets were sent on TID 0, the queue is not allocated, causing a system crash.

A vulnerability has been identified in the Linux kernel within the netfilter module, concerning the restoration of set elements when the delete set operation fails. The issue arises from the set iterator skipping inactive elements, which prevents proper restoration of the original state.

Incorrect access control in ASUS RT-N12+ B1 and RT-N12 D1 routers allows local attackers to obtain root terminal access via the UART interface.

The Asus RT-N12+ B1 router stores credentials in cleartext, which could allow local attackers to obtain unauthorized access and modify router settings.

A CSV Injection vulnerability in the Asus RT-N12+ router allows an administrator to inject arbitrary commands or formulas into the client name parameter. When exported to CSV format, the injected code can be executed in another user's session upon opening the file.

A log injection flaw was found in Keycloak. A text string may be injected through the authentication form when using the WebAuthn authentication mode. This issue may have a minor impact to the logs integrity.

A Cross Site Scripting (XSS) vulnerability in Innovaphone myPBX versions v.14r1, v.13r3, and v.12r2 allows a remote attacker to execute arbitrary code via the query parameter to the /CMD0/xml_modes.xml endpoint.

In WUZHICMS v4.1.0, a stored XSS vulnerability exists in the /affiche/admin/index.php component. Attackers can inject arbitrary scripts or HTML via the $formdata parameter.

CMSeasy version 7.7.7.9 is vulnerable to arbitrary file deletion. An attacker can exploit this vulnerability to delete critical system files.

W jądrze systemu Linux zidentyfikowano i naprawiono podatność, która mogła prowadzić do zakleszczenia (deadlock) podczas próby użycia sock_lock w funkcji .recvmsg. Zamiast tego zastosowano sk_receive_queue.lock w bt_sock_ioctl, aby uniknąć problemu z użyciem po zwolnieniu (UAF).

The WooCommerce WordPress plugin before version 8.6 fails to prevent users with at least the contributor role from leaking products they should not have access to, such as private, draft, and trashed products.

A vulnerability in ZKTeko BioTime version 8.5.4 and earlier allows a remote attacker to obtain sensitive information through the Authentication & Authorization component.

A vulnerability has been identified in the Linux kernel related to null pointer dereference in the ALSA usb-audio module. This issue has been resolved by adding a null check before dereferencing the cs_desc pointer.

W jądrze Linuxa zidentyfikowano podatność związaną z obsługą przerwań SCSI w module UFS. Problem ten został rozwiązany poprzez poprawę obsługi komendy abort w kodzie źródłowym.

A user enumeration vulnerability was found in Portainer CE 2.19.4. During the authentication process, a difference in response time allows a remote unauthenticated attacker to determine if a username is valid.

A NullPointerException was discovered in Time4J Base v5.9.3 in the FormatUtils::useDefaultWeekmodel(Locale) method. Note: multiple third parties dispute the existence of this vulnerability, citing insufficient evidence.