CVE Vulnerability Catalog

The NVIDIA Display Driver for Linux contains a vulnerability where an incorrect conversion between numeric types leads to a heap buffer overflow. Successful exploitation could lead to denial of service, privilege escalation, information disclosure, data tampering, and code execution.

The NVIDIA Display Driver for Windows has a time-of-check time-of-use vulnerability. Successful exploitation can lead to denial of service, privilege escalation, information disclosure, data tampering, and code execution.

NVIDIA Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could cause improper access to GPU resources. A successful exploit might lead to denial of service, escalation of privileges, information disclosure, data tampering, and code execution.

The NVIDIA Display Driver for Linux contains a use-after-free vulnerability. Successful exploitation could lead to denial of service, privilege escalation, information disclosure, data tampering, and code execution.

Vulnerability in STUDENT-MANAGEMENT-SYSTEM (up to commit 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5) in the Dashboard component, leading to improper access controls. The attack can be performed remotely, and the exploit is publicly available.

IBM HTTP Server versions 8.5 and 9.0 are vulnerable to denial of service via the optional module mod_ibm_upload.

The InputFilter::getInstance() method omitted a security sensitive parameter from the instance cache key.

Insufficient state checks allow bypassing two-factor authentication (2FA) controls.

Insufficient state checks allow bypassing two-factor authentication (2FA) verification.

libsolv has a heap buffer overflow vulnerability during decompression of attacker-controlled compressed data in .solv files due to insufficient input validation. A crafted .solv file can lead to out-of-bounds memory access, potentially causing information disclosure, program execution alteration, or denial of service.

FastNetMon Community Edition through 1.2.9 does not verify TLS certificates on outbound HTTPS connections. The execute_web_request_secure() function fails to call set_verify_mode(verify_peer), so OpenSSL does not validate the server's certificate chain. This function is used for telemetry reporting, sending system information.

In FastNetMon Community Edition up to 1.2.9, an integer overflow in the packet capture buffer allocation function allocate_buffer() leads to a smaller-than-expected buffer and subsequent heap corruption via out-of-bounds writes.

Algernon before version 1.17.8, when started with --domain (or --letsencrypt), resolves the served directory by joining the configured --dir with the client-supplied Host header without validation, allowing attackers to read arbitrary files, list directories, and execute server-side Lua code.

In Algernon before 1.17.7, when invoked with a single file, debug mode exposes the full path and contents of the source file in error responses. Any client can trigger an error and obtain the source code.

Twenty CRM versions 1.18.0 and earlier do not set Content-Type, Content-Disposition, or X-Content-Type-Options headers when serving files. This allows an authenticated attacker to upload an HTML file with JavaScript that executes in the context of the Twenty CRM domain when accessed.

In MikroORM before @mikro-orm/knex 6.6.14 and @mikro-orm/sql 7.0.14, the identifier-quoting functions and JSON-path emitters do not properly escape special characters. An application passing attacker-controlled data to public ORM APIs can lead to SQL injection.

Algernon before version 1.17.6 contains a vulnerability in the uploadedFileSaveIn() function in lua/upload/upload.go, which uses filepath.Join() with a caller-supplied directory without boundary checking after joining, allowing file writes outside the server's document root.

Algernon, a small self-contained pure-Go web server, prior to version 1.17.6, has a vulnerability in engine/luahandler.go where the sync.RWMutex protecting LoadCommonFunctions is released before L.Push() and L.PCall() execute. Since gopher-lua's LState is not goroutine-safe, concurrent requests race on the shared state, causing Lua VM corruption.

Improper validation of the search parameter in the com_media files API endpoint leads to a path traversal vulnerability.

NVIDIA Isaac Launchable for Linux has a vulnerability where sensitive information is transmitted in clear text. Successful exploitation could lead to code execution, privilege escalation, information disclosure, and data tampering.