CVE Vulnerability Catalog

In the Linux kernel HMM test (test_hmm), there is a use-after-free vulnerability. When closing the file, device pages are not migrated back to system memory, leaving a dangling zone_device_data pointer.

In the Linux kernel, a vulnerability was found where allocation tags (codetags) are not initialized for pages allocated before the page_ext structure is set up. This causes warnings and potential errors when such pages are freed, especially in configurations with memory allocation profiling debugging enabled.

In the Linux kernel mm/zone_device, after calling ->folio_free() on a device folio, its contents can immediately change (the folio may be reallocated by a driver with a different order). The code touched the folio again after freeing to extract the pgmap, which is unsafe. The fix uses a local stack variable to store the pgmap before calling ->folio_free().

Missing authorization check in STACKIT IaaS API allows authenticated low-privileged attackers to escalate privileges by attaching service accounts to VMs, leading to full organization compromise.

Vulnerability in OpenBullet2 up to version 0.3.2: authenticated remote code execution via creating or modifying job configurations. The plain C# execution mode lacks reference filtering, allowing access to the file system, process spawning, and arbitrary .NET API calls.

A vulnerability in OpenBullet2 through version 0.3.2 allows authenticated users to execute arbitrary commands by uploading script files (.bat, .ps1, .sh) through the FileProxySource proxy loading feature. Attackers can upload malicious script files as proxy sources, causing the server to execute the scripts and return output as proxy lines, resulting in arbitrary command execution on the host as the process user.

OpenBullet2 through version 0.3.2 contains a path traversal vulnerability in the wordlist endpoint, allowing authenticated attackers to read, write, and delete arbitrary files by supplying unsanitized absolute paths. Attackers can chain these operations to achieve remote code execution by manipulating critical system files such as /etc/passwd, as the application runs as root by default.

SQL injection vulnerability in imvks786 student_management_system (up to 9599b560ad3c3b83e75d328b76bedcd489ef1f46) in admin/admin_login.php via a_usr/a_pwd arguments. Remote attack possible, exploit public.

SQL injection vulnerability in imvks786 student_management_system (up to 9599b560ad3c3b83e75d328b76bedcd489ef1f46) in /index.ph via usr/pwd arguments. Remote attack, exploit public.

A memory allocation with excessive size vulnerability in Apache HTTP Server's mod_http leads to denial of service via malicious HTTP requests. Affects versions 2.4.17 through 2.4.67.

In the Req library for Elixir, a vulnerability allows an attacker-controlled HTTP server to exhaust memory in a Req client via decompression-bomb response bodies, crashing the BEAM process.

Use After Free vulnerability in Apache HTTP Server mod_http2 in versions 2.4.55-2.4.67. Occurs when file handles are exhausted.

Bludit prior to version 3.22.0 has a vulnerability in the user management logic that allows deactivated accounts to maintain access via persistent authentication tokens. When an administrator disables a user account, the application fails to invalidate or clear the associated tokenAuth and tokenRemember fields in the JSON database. Consequently, any user with a pre-existing "Remember Me" cookie can bypass the account disablement and maintain a valid authenticated state.

Bludit prior to version 3.22.0 has a Broken Access Control flaw where active sessions remain valid even after the user account is deleted from the database. This allows revoked users to maintain unauthorized access.

Flowise prior to version 3.1.2 has a mass-assignment vulnerability in evaluator create and update that allows cross-workspace evaluator takeover.

Flowise prior to version 3.1.2 has a mass-assignment vulnerability in evaluation create and update that allows cross-workspace evaluation takeover.

Flowise prior to version 3.1.2 has a mass-assignment vulnerability in DatasetRow create and update that allows cross-workspace row takeover.

Flowise prior to version 3.1.2 allows cross-workspace dataset takeover via mass-assignment during dataset creation and update. This issue has been patched in version 3.1.2.

Flowise prior to version 3.1.2 allows cross-workspace template takeover via mass-assignment during CustomTemplate creation and update. This issue has been patched in version 3.1.2.

Flowise prior to version 3.1.2 allows cross-workspace assistant takeover via mass-assignment during assistant creation and update. This issue has been patched in version 3.1.2.