CVE Vulnerability Catalog

In the Linux kernel, in the AMD display driver (drm/amd/display), the dm_resume function may dereference a NULL pointer if 'aconnector->dc_link' is null. The fix adds a check at the beginning of the loop to avoid this issue.

In the Linux kernel, in the AMDGPU driver, the amdgpu_bo_validate_size() function does not check whether the TTM domain manager for the requested memory exists, which can lead to a kernel oops when dereferencing 'man'. The fix adds a check that the manager pointer is not NULL.

W jądrze Linuxa zidentyfikowano podatność, która prowadziła do uszkodzenia pamięci w przypadku zbyt dużej liczby mostów. Dodano brakującą kontrolę poprawności licznika mostów, aby uniknąć uszkodzenia danych poza ustaloną tablicą mostów, gdy liczba mostów przekracza osiem.

W jądrze systemu Linux naprawiono podatność związaną z wywołaniem firmware pdc_iodc_print(). Wykorzystano spinlock pdc_lock do ochrony równoległych modyfikacji bufora iodc_dbuf[], a także sprawdzono długość, aby zapobiec przepełnieniu bufora.

A weakness has been identified in SourceCodester Hotel and Lodge Management System 1.0. The impacted element is an unknown function of the file /profile.php of the component Profile Page. Executing manipulation of the argument image can lead to unrestricted upload. The attack may be launched remotely. The exploit has been made available to the public and could be exploited.

CubeAPM w wersji nightly-2025-08-01-1 pozwala nieautoryzowanym atakującym na wstrzykiwanie dowolnych wpisów do logów w systemach produkcyjnych poprzez punkt końcowy /api/logs/insert/elasticsearch/_bulk. Ten punkt końcowy akceptuje dane logów w trybie zbiorczym bez wymogu uwierzytelnienia lub walidacji danych wejściowych.

Multiple OS command injection vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b190912. A specially crafted series of HTTP requests can lead to arbitrary command execution. This command injection is related to the `counts` request parameter.

Multiple OS command injection vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b190912. A specially crafted series of HTTP requests can lead to arbitrary command execution. This command injection is related to the `ipaddr` request parameter.

Multiple OS command injection vulnerabilities exist in the swctrl functionality of Planet WGR-500 v1.3411b190912. A specially crafted network request can lead to arbitrary command execution. This command injection is related to the `new_device_name` request parameter.

Multiple OS command injection vulnerabilities exist in the swctrl functionality of Planet WGR-500 v1.3411b190912. A specially crafted network request can lead to arbitrary command execution. This command injection is related to the `new_password` request parameter.

Multiple stack-based buffer overflow vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b190912. Specially crafted HTTP requests with submit-url and ipaddr parameters can trigger buffer overflows.

Multiple stack-based buffer overflow vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b190912. Specially crafted HTTP requests can lead to stack-based buffer overflow. This vulnerability is related to the `submit-url` request parameter.

Multiple stack-based buffer overflow vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b190912. A specially crafted series of HTTP requests can lead to stack-based buffer overflow. An attacker can send a series of HTTP requests to trigger these vulnerabilities.

Multiple stack-based buffer overflow vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b190912. Specially crafted HTTP requests can lead to stack-based buffer overflow. This vulnerability is related to the `ipaddr` request parameter used to compose the `"ping -c <counts> <ipaddr> 2>&1 > %s &"` string.

A denial of service vulnerability exists in the ModbusTCP server functionality of OpenPLC _v3 a931181e8b81e36fadf7b74d5cba99b73c3f6d58. A specially crafted series of network connections can lead to the server not processing subsequent Modbus requests. An attacker can open a series of TCP connections to trigger this vulnerability.

Clash Verge w wersjach do 2.2.3 (naprawione w 2.3.0) domyślnie wymusza instalację usług systemowych (clash-verge-service) i udostępnia kluczowe funkcje przez nieautoryzowane API HTTP `/start_clash`. Umożliwia to lokalnym użytkownikom przesyłanie dowolnych parametrów bin_path, które są następnie wykonywane przez proces usługi, co prowadzi do eskalacji uprawnień lokalnych.

A format string vulnerability exists in the formPingCmd functionality of Planet WGR-500 v1.3411b190912. A specially crafted series of HTTP requests can lead to memory corruption.

Insufficiently Protected Credentials in the Crowdstrike connector can lead to Crowdstrike credentials being leaked. A malicious user can access cached credentials from a Crowdstrike connector in another space by creating and running a Crowdstrike connector in a space to which they have access.

Improper neutralization of input during web page generation in Kibana can lead to Stored XSS via case file upload.

W systemie zarządzania hotelami i pensjonatami SourceCodester w wersji 1.0 odkryto lukę bezpieczeństwa. Problem dotyczy nieznanej funkcji w pliku /login.php, która umożliwia wstrzyknięcie SQL poprzez manipulację argumentem email.