CVE Vulnerability Catalog

Podatność CVE-2024-9147 dotyczy niewłaściwej neutralizacji tagów HTML związanych z skryptami w aplikacji Bna Informatics PosPratik, co pozwala na ataki typu XSS poprzez ciągi zapytań HTTP. Problem ten dotyczy wersji PosPratik przed 3.2.1.

A vulnerability was found in PAM where secret information (e.g., passwords) is stored in memory. An attacker can send characters to the victim's standard input (stdin), training the branch predictor to speculatively execute an ROP chain. This could leak passwords, including those from /etc/shadow during authentication.

Vilo 5 Mesh WiFi System version 5.16.1.33 and earlier lacks authentication in the Boa webserver, allowing remote, unauthenticated attackers to retrieve logs containing sensitive system information.

A vulnerability in Vilo 5 Mesh WiFi System version 5.16.1.33 and earlier allows remote information disclosure. An unauthenticated attacker can send a GET request to the index page, leaking memory addresses of uClibc and the stack.

A Directory Traversal vulnerability in the Boa webserver of Vilo 5 Mesh WiFi System versions up to 5.16.1.33 allows remote, unauthenticated attackers to enumerate the existence and length of any file in the filesystem by placing malicious payloads in the path of any HTTP request.

In the Linux kernel, an ext4 vulnerability involves accessing an uninitialized spinlock (sbi->s_bdev_wb_lock) during the fast-commit replay path. This triggers a warning about registering a non-static key and can disrupt lock validation. The fix moves the spinlock initialization earlier in __ext4_fill_super().

W jądrze Linuxa rozwiązano podatność związaną z niewłaściwym zarządzaniem licznikami referencji na węźle CPU. W funkcji parse_perf_domain, w przypadku błędu podczas wywołania of_parse_phandle_with_args, odniesienie do węzła urządzenia CPU nie jest prawidłowo dekrementowane.

A vulnerability was found in the Linux kernel's DSA shutdown sequence. Two issues were identified: a use-after-free in the lan9303 driver due to dev_get_drvdata() calls after shutdown, and a race condition when zeroing conduit->dsa_ptr during packet reception. The fix closes the conduit interface before zeroing pointers, preventing access to the driver after shutdown.

An integer overflow vulnerability was discovered in the Linux kernel's BLKSECDISCARD operation. Passing crafted values (sector 512 and a near-maximum uint64_t sector count) causes an infinite loop in blkdev_issue_secure_erase(), leading to system overload and hang.

A vulnerability was found in the Linux kernel's ext4 filesystem. If the default hash version is set to DX_HASH_SIPHASH but the casefold feature is not enabled, mounting the filesystem fails.

W jądrze Linuxa rozwiązano podatność związaną z rejestracją grup sysfs przez rdzeń sterownika. Umożliwiono uproszczenie obsługi błędów oraz czyszczenia, a także uniknięcie wyścigu UAF podczas wyrejestrowywania, gdzie atrybuty sysctl były dostępne po zwolnieniu struktury info.

A deadlock vulnerability was found in the Linux kernel's EROFS filesystem caused by crafted images with overlapping pclusters. The issue leads to a task hang due to improper handling of managed folios and I/O submission ordering.

A cross-site scripting (XSS) vulnerability was found in Piwigo version 14.5.0 in the /admin.php?page=photo component. An attacker can inject malicious JavaScript or HTML into the Description field, leading to arbitrary script execution in the victim's browser.

A cross-site scripting (XSS) vulnerability was found in Piwigo version 14.5.0 in the /admin.php?page=album component. An attacker can inject malicious JavaScript or HTML into the Description field, leading to arbitrary script execution in the victim's browser.

A Remote Code Execution (RCE) vulnerability in ZoneMinder through version 1.36.33 allows an attacker to create a new .php log file in the language folder. By executing a crafted payload, the attacker can escalate privileges and execute arbitrary commands on the remote system.

A directory listing vulnerability in the baserCMS plugin for BurgerEditor and BurgerEditor Limited Edition before version 2.25.1 allows remote attackers to obtain sensitive information by exposing a list of uploaded files.

A reflected cross-site scripting (XSS) vulnerability in Elaine's Realtime CRM Automation v6.18.17 allows attackers to execute arbitrary JavaScript code in the user's web browser by injecting a crafted payload into the dialog parameter at wrapper_dialog.php.

Krayin CRM version 1.3.0 is vulnerable to Cross Site Scripting (XSS) via the organization name field in /admin/contacts/organizations/edit/2. An attacker can inject malicious JavaScript code that will execute in the administrator's browser.

Cross Site Scripting (XSS) vulnerability in LimeSurvey before version 6.5.0+240319 allows a remote attacker to execute arbitrary JavaScript code in the victim's browser. The issue stems from missing input validation and output encoding in the Alert Widget's message component.

A Cross-Site Scripting (XSS) vulnerability was found in LimeSurvey before version 6.5.12+240611. A remote attacker can execute arbitrary code via a crafted script in the title and comment fields.