CVE Vulnerability Catalog

Request Tracker is vulnerable to reflected XSS via the "Page" parameter in GET requests. An attacker can craft a URL that executes arbitrary JavaScript in the victim's browser. Affects versions 5.0.4-5.0.9 and 6.0.0-6.0.2.

In the Linux kernel network subsystem, a vulnerability was found in the RED queuing discipline. When RED has children (e.g., qfq) and a parent (e.g., tbf) calls dequeue after peek, a null pointer dereference and kernel panic can occur. The fix replaces the direct dequeue call with qdisc_dequeue_peeked().

The affected product may expose credentials remotely between low privileged visualization users during concurrent login operations due to insufficient isolation of authentication data. The vulnerability affects only login operations within an active visualization session.

In cap_net service, omitting a key from a new limit treated it as 'allow any' instead of rejecting it, potentially allowing an application to extend network permissions.

In the FreeBSD kernel (fusefs), when handling extended attributes, the fusefs kernel module calls strlen() on a daemon-supplied buffer without verifying that the entire list is NUL-terminated. A malicious daemon can send a non-NUL-terminated list, causing an out-of-bounds read of one buffer and potential out-of-bounds write of a second buffer.

Insufficient validation of member zone data may cause catalog zone transfer to fail.

Concurrency and locking defects in GSS-TSIG may lead to improper authentication mechanism behavior.

Insufficient validation of names during AXFR (DNS zone transfer) may allow an attacker to inject malicious or malformed data.

Vulnerability involves incorrect behavior of views with TCP PROXY requests. No further details in the description.

The WordPress plugin CF7 WOW Styler up to version 1.7.6 contains a missing authorization vulnerability that allows exploiting incorrectly configured access control security levels.

The WordPress plugin Mail Mint up to version 1.19.5 exposes sensitive system information to unauthorized entities, allowing retrieval of embedded sensitive data.

Mattermost Mobile Apps versions up to 2.37 11.4 2.0.37 11.0.4 11.1.3 11.3.2 10.11.11.0 fail to properly validate the SSO authentication callback origin, allowing an attacker controlling a malicious Mattermost server to steal user credentials for a legitimate Mattermost server via relaying the SSO code exchange flow through the mobile application.

Mattermost versions 11.5.x <= 11.5.1 fail to validate team-level run_create permission against the target team when creating a playbook run, allowing an authenticated team member to create runs in teams where they lack permission by specifying a different team ID in the API request.

Insufficient sanitization of volume paths in Netatalk 3.1.0 through 4.4.2 allows a local privileged user to inject OS commands and execute arbitrary code via a crafted volume path.

Authentication modules in Netatalk 1.5.0 through 4.4.2 fail to check the return value of seteuid(), which may allow a remote authenticated attacker to retain elevated privileges under error conditions.

Netatalk versions 2.1.0 through 4.4.2 contain a heap over-read vulnerability in extended attribute (EA) header parsing. A remote authenticated attacker can use crafted EA data to obtain limited information or cause minor service disruption.

An off-by-two error in lp_write() in papd in Netatalk 2.0.0 through 4.4.2 allows an adjacent network attacker to modify limited data or cause a minor service disruption via crafted print data.

Netatalk versions 2.1.0 through 4.4.2 contain an LDAP injection vulnerability. A remote authenticated attacker can manipulate LDAP queries, obtaining limited information or modifying LDAP entries via crafted filter input.

A vulnerability in Netatalk versions 1.5.0 through 4.4.2 uses DES-ECB for authentication with a timing side channel, allowing a remote attacker to recover authentication credentials via timing analysis.

A race condition in the privilege toggle mechanism in Netatalk 2.2.5 through 4.4.2 allows a local attacker to obtain limited information, modify limited data, or cause minor service disruption.