CVE Vulnerability Catalog

Problem został rozwiązany poprzez poprawę zarządzania pamięcią. Występuje w systemach iOS 17.5, iPadOS 17.5, macOS Monterey 12.7.6, macOS Sonoma 14.5, macOS Ventura 13.6.8, tvOS 17.5, visionOS 1.3 oraz watchOS 10.5.

Problem logiczny został rozwiązany poprzez poprawę zarządzania stanem. Podatność ta została naprawiona w macOS Monterey 12.7.6, macOS Sonoma 14.4 oraz macOS Ventura 13.6.8.

A Cross Site Scripting (XSS) vulnerability in Lost and Found Information System 1.0 allows a remote attacker to escalate privileges via the 'page' parameter in php-lfis/admin/index.php.

SQL Injection vulnerability in Lost and Found Information System 1.0 allows a remote attacker to escalate privileges via the id parameter in manage_category.php.

SQL Injection vulnerability in Lost and Found Information System 1.0 allows a remote attacker to escalate privileges via the id parameter in view_category.php.

A Cross Site Scripting (XSS) vulnerability in Lost and Found Information System 1.0 allows a remote attacker to escalate privileges via the first, last, and middle name fields on the User Profile page.

Wersje silnika Delphix przed wydaniem 25.0.0.0 zawierają lukę, która umożliwia zdalne wykonanie kodu (RCE).

A vulnerability has been identified in the Linux kernel related to the allocation of the cpumask variable on the stack, which may lead to stack overflow. It has been resolved by recommending the use of the *cpumask_var API for neutral configuration allocation of the cpumask variable.

A vulnerability in the Linux kernel related to the allocation of cpumask variable on the stack has been resolved. When CONFIG_CPUMASK_OFFSTACK is enabled, such allocation can lead to potential stack overflow.

Zohocorp ManageEngine OpManager, OpManager Plus, OpManager MSP oraz RMM w wersjach 128317 i niższych są podatne na uwierzytelnioną injekcję SQL w monitorowaniu URL.

In the Linux kernel, in the ASoC driver for Mediatek MT8195, removing the codec entry for the ETDM1_OUT_BE dai link left the platforms array empty, causing an out-of-bounds read (KASAN) during initialization.

In the Linux kernel, a NULL pointer dereference vulnerability was found in the GFS2 filesystem's gfs2_log_flush function. The issue occurs when glock operations race with an unmount, causing access to a freed sd_jdesc object.

W bibliotece fast-xml-parser, która jest otwartoźródłowym parserem XML w czystym JavaScript, występuje podatność ReDOS w pliku currency.js. Problem ten został naprawiony w wersji 4.4.1.

Podatność typu Buffer Overflow w NEUQ_board w wersji 1.0 umożliwia zdalnemu atakującemu spowodowanie awarii usługi poprzez komponent password.h.

An incorrect access control vulnerability in the Himalaya Xiaoya nano smart speaker (rom_version 1.6.96) allows a remote attacker to have an unspecified impact. The flaw enables unauthorized access to the device.

A vulnerability was found in the Linux kernel's CXL subsystem related to automatic pmem region assembly. During CXL endpoint port probing, an attempt to auto-assemble a pmem region caused a NULL pointer dereference because the required cxl_nvd object was not yet registered. The fix changes the registration order and adds a port parameter to cxl_find_nvdimm_bridge() to query the common ancestor.

In the Linux kernel, the CAN J1939 subsystem improved error handling for tightly received RTS messages in xtp_rx_rts_session_new. The less informative WARN_ON_ONCE backtraces were replaced with a new error handling method that provides clearer error messages and allows early termination of problematic sessions.

Twisted to framework oparty na zdarzeniach dla aplikacji internetowych, wspierający Pythona 3.6 i nowsze. Serwer HTTP 1.0 i 1.1 w twisted.web mógł przetwarzać złożone żądania HTTP w nieodpowiedniej kolejności, co mogło prowadzić do ujawnienia informacji.

In the Linux kernel, in the NVMe over Fabrics subsystem, the use of tags for register read/write commands was changed. Previously, with many simultaneous commands, tags in the admin queue could be exhausted, potentially causing a kernel hang during a reset. The fix uses reserved tags for these operations, which is safe for the disable and enable controller paths.

In the Linux kernel's ILA module, ila_output() does not block bottom halves (BH), which can lead to a race condition and corruption of dst_cache structures. The fix uses local_bh_disable().