CVE Vulnerability Catalog

A vulnerability exists that allows low-privileged users to read and update data in various directories used by the Zenon system. An attacker could exploit this vulnerability by using specially crafted programs on the installed zenon hosts.

A vulnerability exists allowing low-privileged users to read and update data in various directories used by the Zenon system. An attacker could exploit this vulnerability by using specially crafted programs on the installed zenon hosts.

An out-of-bounds memory access flaw was found in the Linux kernel’s TUN/TAP device driver functionality. This allows a local user to generate a malicious networking packet, potentially leading to system crashes or privilege escalation.

A flaw was found in libvirt where the virStoragePoolObjListSearch function does not return a locked pool as expected, leading to a race condition and denial of service when attempting to lock the same object from another thread.

A flaw was found in FRRouting when parsing certain babeld unicast hello messages that are intended to be ignored. This issue may allow an attacker to send specially crafted hello messages, leading to an infinite loop and causing a denial of service.

A heap-based buffer overflow issue was found in ImageMagick's PushCharPixel() function in quantum-private.h. A local attacker may trick the user into opening a specially crafted file, leading to an out-of-bounds read error and potentially causing the application to crash.

A flaw in the Linux kernel's cpu_entry_area mapping of X86 CPU data to memory allows unauthorized memory access. Despite the 'Randomize per-cpu entry area' feature implemented in /arch/x86/mm/cpu_entry_area.c (based on CVE-2023-0597), there is still a risk of per-cpu entry area leaks. A local user may guess the location of exception stacks or other important data, potentially leading to privilege escalation.

A use-after-free flaw was found in vcs_read in vc_screen.c in the Linux Kernel. This issue may allow an attacker with local user access to cause a system crash or leak internal kernel information.

A flaw was found in the Quay registry, which involves a lack of validation for image labels coming from images. While labels created through Quay are validated, labels from images are not subjected to the same validation, allowing an attacker to publish a malicious image.

A DMA reentrancy issue leading to a use-after-free error was found in the e1000e NIC emulation code in QEMU. This issue could allow a privileged guest user to crash the QEMU process on the host, resulting in a denial of service.

A flaw was found in Keylime that allows for a remote denial of service attack against its SSL connections. An attacker can exhaust all available connections.

A double-free vulnerability was found in handling vmw_buffer_object objects in the vmwgfx driver in the Linux kernel. This issue occurs due to the lack of validating the existence of an object prior to performing further free operations on the object, which may allow a local privileged user to escalate privileges and execute code in the context of the kernel.

A race condition vulnerability was found in the vmwgfx driver in the Linux kernel. The flaw exists within the handling of GEM objects and results from improper locking when performing operations on an object.

A use-after-free flaw was found in nfc_llcp_find_local in net/nfc/llcp_core.c in the Linux kernel. This flaw allows a local user with special privileges to impact a kernel information leak issue.

Thunderbird allowed the use of the Text Direction Override Unicode Character in filenames. As a result, an email attachment could be incorrectly displayed as a document file, while in fact it was an executable file.

The Auto Location for WP Job Manager plugin before version 1.1 does not sanitize and escape some of its settings, which could allow high privilege users such as admins to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.

The All-in-one Floating Contact Form WordPress plugin before version 2.1.2 does not sanitize and escape some of its settings, which could allow high privilege users such as admins to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.

The vulnerability related to improper input validation in the ContentType parameter for attachments on TicketCreate or TicketUpdate operations in OTRS Generic Interface modules allows any authenticated attacker to perform a host header injection for the ContentType header of the attachment.

An improper privilege check in the OTRS ticket move action in the agent interface allows any authenticated attacker to perform a move of a ticket without the needed permission.

An improper input validation vulnerability in OTRS Survey modules allows any attacker with a link to a valid and unanswered survey request to inject javascript code in free text answers. This allows a cross site scripting attack while reading the replies as authenticated agent.