CVE Vulnerability Catalog

In the xfig diagramming tool, a segmentation fault occurs in fig2dev within the read_arcobject function, allowing an attacker to cause a denial of service via local input manipulation.

A vulnerability was found in fig2dev that allows an attacker to manipulate local input in the genge_itp_spline function, potentially leading to availability issues.

In the xfig diagramming tool, a stack overflow while running fig2dev allows memory corruption via local input manipulation in the read_objects function.

pnpm is a package manager that prior to version 10.0.0 used the md5 function for path shortening. In case of a collision, different libraries could share the same storage path, leading to version identification issues.

A vulnerability was found in mod_proxy_cluster where the <Directory> directive is incorrectly used instead of <Location>. The <Directory> directive does not restrict access based on IP address, allowing anyone with host access to send MCMP requests that can add, remove, or update load-balancing nodes.

A stored cross-site scripting (XSS) vulnerability in Alkacon OpenCMS v17.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the image parameter under the Create/Modify article function.

Cross-Site Scripting (XSS) vulnerability in NodeBB v4.0.4 and before allows remote attackers to store arbitrary code in the admin API Access token generator.

A Cross-Site Scripting (XSS) vulnerability in NodeBB v4.0.4 and earlier allows remote attackers to store arbitrary JavaScript code, potentially rendering the IP blacklist functionality unusable until the malicious content is removed from the database.

In the Linux kernel, the int340x thermal driver lacked a NULL check for the ACPI device pointer (adev), which could lead to a NULL pointer dereference in int3402_thermal_probe(). A check has been added, returning -ENODEV if adev is NULL.

In the Linux kernel's DLM (Distributed Lock Manager), a vulnerability leads to a NULL pointer dereference (NPD). When a positive value is written to the event_done file, the new_lockspace function undoes all work, leaving lockspace uninitialized. The __dlm_new_lockspace function incorrectly treats this positive value as success, passing a NULL pointer to dlm_find_lockspace_local, causing a crash.

In the Linux kernel, unnecessary RTNL lock operations were removed for SIOCBRADDIF and SIOCBRDELIF ioctls, which caused deadlocks and warnings about waiting for network device release. The issue occurred when one thread detached an interface from a bridge while another tried to remove the bridge, leading to a lockup and 'unregister_netdevice: waiting' splat.

W jądrze Linuxa zidentyfikowano podatność związaną z trybem bondingu, która może prowadzić do ostrzeżeń podczas zmiany trybu bondingu po podłączeniu programu XDP. Problem występuje, gdy tryb bondingu jest zmieniany po przypisaniu programu XDP, co może skutkować nieprawidłowym działaniem.

In the Linux kernel, the PCI brcmstb driver has a vulnerability where the number of regulators is not set to zero after a regulator_bulk_get() error. If the PCIe link fails, a subsequent regulator_bulk_free() call causes a kernel panic.

In the Linux kernel, the mvpp2 driver has a vulnerability that can corrupt the parser TCAM memory. Concurrent access to TCAM and SRAM index registers without proper locking can cause writes to wrong rows and TOCTOU errors during row allocation. This was observed when mvpp2_set_rx_mode() ran on two CPUs simultaneously, corrupting the MVPP2_PE_MAC_UC_PROMISCUOUS entry and dropping all incoming unicast traffic.

A vulnerability has been identified in the Linux kernel concerning the nfsd_proc_stat_init() function, which ignores the return code from svc_proc_register(). If the procfile creation fails, the kernel issues a warning when attempting to remove the entry later.

A vulnerability in the MIT Kerberos implementation allows GSSAPI-protected messages using RC4-HMAC-MD5 to be spoofed due to weaknesses in the MD5 checksum design. If RC4 is preferred over stronger encryption types, an attacker could exploit MD5 collisions to forge message integrity codes.

A NULL pointer dereference vulnerability was found in the SoupAuthDigest authentication mechanism of the libsoup library. A malicious HTTP server can exploit this flaw to crash the libsoup client.

A flaw was found in libsoup, where soup_auth_digest_authenticate() is vulnerable to a NULL pointer dereference. This issue may cause the libsoup client to crash.

A flaw was found in libsoup's SoupContentSniffer, specifically in the sniff_mp4 function, which may cause a NULL pointer dereference. A malicious HTTP server can exploit this to crash the libsoup client.

A flaw was found in the libsoup library in the implementation of HTTP range requests. It allows a malicious client to request the same range multiple times in a single HTTP request, causing excessive memory consumption on the server. This vulnerability does not enable a full denial of service.