CVE Vulnerability Catalog

Podatność typu use-after-free w komponencie sygnalizacyjnym WebRTC. Została naprawiona w wersjach Firefox 146, Firefox ESR 140.6, Thunderbird 146 oraz Thunderbird 140.6.

RethinkDB before version 2.4.4 contains a classic buffer overflow vulnerability due to copying data without checking input size. This can lead to crashes or potential arbitrary code execution.

An integer overflow vulnerability exists in the write method of the Buffer class in Robocode version 1.9.3.6. The method fails to properly validate the length of data being written, potentially leading to buffer overflows and arbitrary code execution. Attackers can exploit this by submitting specially crafted inputs.

A directory traversal vulnerability exists in the CacheCleaner component of Robocode version 1.9.3.6. The recursivelyDelete method fails to properly sanitize file paths, allowing attackers to traverse directories and delete arbitrary files on the system. This can be exploited by submitting specially crafted inputs.

Podatność CVE-2025-12504 dotyczy niewłaściwej neutralizacji specjalnych elementów używanych w poleceniach SQL w oprogramowaniu Talent Software UNIS, co umożliwia atak typu SQL Injection. Problem ten dotyczy wersji UNIS przed 42321.

W podatności CVE-2025-11022 zidentyfikowano lukę typu Cross-Site Request Forgery (CSRF) w Personal Project Panilux, która umożliwia ataki CSRF. Problem ten prowadzi do możliwości wstrzykiwania poleceń.

Ivanti Endpoint Manager prior to version 2024 SU4 SR1 contains a stored XSS vulnerability that allows a remote unauthenticated attacker to execute arbitrary JavaScript in the context of an administrator session. User interaction is required.

In the Linux kernel, in the RDMA/siw subsystem, a bug was fixed where QP destruction did not wait for all references to be dropped. The destruction completion was delayed until all siw references to the QP are released, preventing a use-after-free.

DeepChat versions 0.5.1 and below are vulnerable to XSS attacks through improperly sanitized Mermaid content. The security patch can be bypassed using unquoted HTML attributes combined with HTML entity encoding. Remote Code Execution is possible on the victim's machine via the electron.ipcRenderer interface. No fix is available at time of publication.

In the Linux kernel's cifs module, a session state check issue during reconnect can lead to a use-after-free. The fix prevents collecting an exiting session in smb2_reconnect_server() because it will be released soon.

Wersja 0.8.0 i nowsze trybu obfuskacji Proof-of-Work w Altcha mają lukę, która pozwala zdalnym użytkownikom na odzyskanie nonce Proof-of-Work w stałym czasie za pomocą dedukcji matematycznej. Producent kwestionuje tę podatność, podkreślając, że celem produktu jest zniechęcenie do automatycznego skanowania, a nie zapewnienie odporności na zdeterminowanych atakujących.

NUT-14 allows cashu tokens to be created with a preimage hash. However, nutshell (cashubtc/nuts) before 0.18.0 does not validate the size of preimage when the token is spent. The preimage is stored by the mint and an attacker can exploit this to fill the mint's database and disk with arbitrary data.

SQL injection vulnerability in /php/api_patient_schedule.php in SourceCodester Patients Waiting Area Queue Management System v1 allows attackers to execute arbitrary SQL commands via the appointmentID parameter.

In multiple locations, there is a possible way to launch an application from the background due to a precondition check failure. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Emlog Pro 2.5.20 has an arbitrary file deletion vulnerability. It stems from the admin/template.php and admin/plugin.php components, which fail to perform path verification and dangerous code filtering for deletion parameters, allowing attackers to exploit this feature for directory traversal.

Improper configuration of the SSH service in Infinera MTC-9 allows an unauthenticated attacker to execute arbitrary commands and access data on the file system. This issue affects MTC-9 from R22.1.1.0275 before R23.0.

Remote shell service (RSH) in Infinera MTC-9 version R22.1.1.0275 allows an attacker to utilize password-less user accounts and obtain system access by activating a reverse shell. This issue affects MTC-9 from R22.1.1.0275 before R23.0.

In the Linux kernel, the sev-guest module now double-buffers messages. Previously, encryption algorithms read and wrote directly to shared unencrypted memory, potentially leaking information and allowing the host to tamper with message integrity.

In the Linux kernel, cifs has a potential use-after-free in TCP_Server_Info::hostname. Protecting access outside the reconnect path prevents potential use-after-free bugs.

In the SMB client (cifs) in the Linux kernel, a potential use-after-free vulnerability was found in smb2_query_info_compound. During retries, a previously allocated cfid could be freed, and the lack of pointer reset led to use-after-free.