CVE Vulnerability Catalog

A Cross Site Scripting (XSS) vulnerability in Jeppesen JetPlanner Pro version 1.6.2.20 allows a remote attacker to execute arbitrary code in the victim's browser.

A vulnerability was found in the libsoup library due to its failure to correctly verify the termination of multipart HTTP messages. This allows a remote attacker to send a specially crafted multipart HTTP body, causing an out-of-bounds read.

A resource leak was found in the Linux kernel's blk_register_queue() function error path. When queue registration succeeds for blk_mq_sysfs_register() but a later error occurs, the missing blk_mq_sysfs_unregister() call causes a memory leak.

In the Linux kernel's MTK PMIC keys driver (mtk-pmic-keys), a null pointer dereference vulnerability was found. The issue occurs when a button is not defined in the device tree (e.g., left floating), causing the code to access an uninitialized regs pointer.

A bug was found in the Linux kernel PHY driver for phylink-managed network interfaces. During system resume from suspend, the PHY state machine is not properly stopped, triggering a WARN_ON warning and potentially incorrect operation. The issue affects DSA drivers and other network drivers using phylink that do not set the mac_managed_pm flag.

A memory leak was found in the Linux kernel's lan743x driver. When GSO is enabled and the fragment count is zero, the skb is mapped to the EXT descriptor instead of the LS descriptor, preventing its deallocation.

A denial-of-service vulnerability has been found in the libsoup HTTP client library. It is triggered when a libsoup client receives a 401 (Unauthorized) HTTP response with a crafted domain parameter in the WWW-Authenticate header. Processing this malformed header can crash the client application using libsoup.

A flaw was found in FreeRDP used by Anaconda's remote install feature, where a crafted RDP packet could trigger a segmentation fault. This causes the service to crash and remain defunct, resulting in a denial of service. It occurs pre-boot and is likely due to a NULL pointer dereference.

There is an issue in CPython when using `bytes.decode("unicode_escape", error="ignore|replace")`. If you are not using the "unicode_escape" encoding or an error handler, you are not affected. To work around, stop using the error= handler and wrap the bytes.decode() call in a try-except catching DecodeError.

A vulnerability in the realme GT 2 (RMX3311) running Android 14 with realme UI 5.0 allows a physically proximate attacker to obtain sensitive information via the show app only setting function.

An XSS vulnerability in the Automatic Configuration Backup (ACB) service of Netgate pfSense CE (prior to 2.8.0 beta) and corresponding Plus builds allows remote attackers to execute arbitrary JavaScript, delete backups, or leak sensitive information via an unsanitized 'reason' field and a derivable device key generated from the public SSH key.

In the crossbeam-channel Rust crate, the `Drop` method of the internal `Channel` type has a race condition that could, under certain circumstances, lead to a double-free resulting in memory corruption.

A vulnerability in the microarchitecture of Intel processors allows disclosure of sensitive information during transient execution. An authenticated user with local access can potentially read data that should not be accessible.

A weakness has been identified in Dígitro NGC Explorer up to 3.48.21, affecting an unknown function that allows remote session expiration. Upgrading to version 3.48.22 fixes this issue by strengthening session control, expiration, and invalidation mechanisms.

A vulnerability was identified in Dígitro NGC Explorer up to 3.48.21, affecting an unknown function of the Configuration Page component, leading to missing password field masking. The attack can be launched remotely. Upgrading to version 3.48.22 fixes this issue by reviewing and correcting controls related to user information exposure.

A flaw in Rust's Ring package causes a panic when overflow checking is enabled. In the QUIC protocol, an attacker can trigger this panic by sending a specially crafted packet. The issue occurs approximately once every 2^32 packets.

In systems using LUKS-encrypted disks with GRUB configured for TPM-based auto-decryption, an attacker with physical access can corrupt the filesystem superblock. This forces GRUB into rescue mode while the decryption key remains in memory, allowing access to unencrypted data without authentication.

W jądrze Linuxa rozwiązano podatność związaną z nieprawidłowym czyszczeniem wpisów FDB, MDB i VLAN podczas odłączania. Problem polegał na tym, że niektóre sterowniki mogły pozostawiać te wpisy, co prowadziło do ostrzeżeń podczas odłączania.

Gnuplot is affected by a heap buffer overflow at function utf8_copy_one.

A flaw was found in GLib, which is vulnerable to an integer overflow in the g_string_insert_unichar() function. When the position at which to insert the character is large, the position will overflow, leading to a buffer underwrite.