CVE Vulnerability Catalog

On Thermo Fisher Ion Torrent OneTouch 2 INS1005527 devices, an X11 display server is started on power-on and listens on all network interfaces on port 6000. The default X11 access control list allows connections only from 127.0.0.1 and 192.168.2.15, but if the device is connected to a DHCP network and does not get the 192.168.2.15 IP, the server becomes accessible to other network devices. This can be exploited to gain root privileges and execute code remotely.

The Thermo Fisher Torrent Suite Django application 5.18.1 has weak default credentials stored as fixtures for the Django ORM API. The ionadmin user account can authenticate to default deployments with the password ionadmin. The user guide recommends changing default credentials, but a password change policy for default administrative accounts is not enforced.

Thermo Fisher Ion Torrent OneTouch 2 INS1005527 devices run an SSH server on default port 22. The root account has a weak default password of ionadmin, and a password change policy for the root account is not enforced. An attacker with network connectivity can achieve root code execution.

A race condition was found in the Linux kernel between SR-IOV enable/disable and hotplug operations. The previous fix using locks in sriov_del_vfs() and sriov_add_vfs() caused deadlocks when removing physical functions (PFs) with SR-IOV enabled. The new patch moves the lock to sriov_numvfs_store(), fixing the race without deadlock risk.

In the Linux kernel, io_uring/rsrc has an issue with calculating the offset of the first page in a folio after coalescing. The code uses incorrect bit mask logic that does not account for the lack of guaranteed alignment of user pointers.

A vulnerability in Synology Mail Server allows remote authenticated attackers to read and write non-sensitive settings, and disable some non-critical functions.

A vulnerability in portenable cgi allows remote authenticated users to get the status of installed packages.

A vulnerability in VideoPlayer2 subtitle cgi allows remote authenticated users to read .srt files.

A vulnerability in FileStation file cgi allows remote authenticated users to read file metadata and path information.

A vulnerability in FileStation thumb cgi allows remote authenticated users to read/write image files.

A vulnerability was detected in dayrui XunRuiCMS up to 4.7.1 in an unknown part of the file /admin79f2ec220c7e.php?c=api&m=demo&name=mobile in the Domain Name Binding Page component. The manipulation results in cross site scripting. The attack may be performed remotely and has a high complexity level.

A security vulnerability has been detected in dayrui XunRuiCMS up to 4.7.1 in some unknown functionality of the file /admind45f74adbd95.php?c=field&m=add&rname=site&rid=1&page=1 in the Add Data Validation Page component. Manipulation of the data[name] argument leads to cross site scripting. The attack is possible remotely.

An improper control of dynamically-managed code resources vulnerability in the WebAPI component in Synology DiskStation Manager (DSM) before 7.1.1-42962-8, 7.2.1-69057-2, and 7.2.2-72806 and Synology Unified Controller (DSMUC) before 3.1.4-23079 allows remote authenticated users to obtain privileges without consent via unspecified vectors.

Out-of-bounds write vulnerability in cgi components in Synology DiskStation Manager (DSM) before 7.2.1-69057-2 and 7.2.2-72806 and Synology Unified Controller (DSMUC) before 3.1.4-23079 allows remote attackers to conduct denial-of-service attacks via unspecified vectors.

A Cross-Site Request Forgery (CSRF) vulnerability in WebAPI Framework in Synology DiskStation Manager (DSM) before 7.2.1-69057-2 and 7.2.2-72806 and Synology Unified Controller (DSMUC) before 3.1.4-23079 allows remote attackers to execute arbitrary code via unspecified vectors.

In the Linux kernel, the xfrm/IPsec subsystem fails to delete fallback states (ipcomp) from lists/hashtables when the last user state is deleted, only when the last reference is gone. This can trigger a WARN in xfrm_state_fini and potential memory leak.

A vulnerability has been identified in the Linux kernel that allows for incorrect identification of socket states in the context of garbage collection. The issue arises from the lack of initialization of the SCC index in the unix_add_edge() function, leading to incorrect grouping of sockets in cyclic references.

Wtyczka Omnichannel for WooCommerce: Integracja z Google, Amazon, eBay i Walmart – Powered by Codisto dla WordPress jest podatna na przechowywane ataki Cross-Site Scripting (XSS) poprzez funkcję sync() we wszystkich wersjach do 1.3.65 włącznie, z powodu niewystarczającej sanitizacji wejścia i ucieczki wyjścia. Umożliwia to nieautoryzowanym atakującym wstrzykiwanie dowolnych skryptów webowych na stronach, które będą wykonywane, gdy użytkownik uzyska dostęp do zainfekowanej strony.

Authenticated SQL Injection Vulnerability in Endpoint Module Rest API.

An issue was discovered in Fanvil x210 V2 version 2.12.20 allowing unauthenticated attackers on the local network to bypass authentication and access administrative functions such as file upload, firmware update, and device reboot.