CVE Vulnerability Catalog

A vulnerability related to RCU task stalls during threaded busypoll has been identified and fixed in the Linux kernel. This issue caused bpftrace to hang during startup.

A vulnerability has been identified in the Linux kernel related to use-after-free in the remove_nh_grp_entry() function. The issue occurs when removing a nexthop from a group, potentially leading to dereferencing freed percpu memory stats.

ZEBRA, a Zcash node written in Rust, had an issue with handling Orchard transactions that contained the rk field with an identity value. Versions prior to zebrad 4.3.1 and zebra-chain 6.0.2 would cause the node to crash when attempting to verify such transactions.

Brave CMS prior to commit 6c56603 had a publicly accessible contact form, allowing for the injection of unsafe HTML into email content. User-supplied message text was processed by the nl2br() function, which did not sanitize HTML, enabling attackers to create phishing interfaces in emails sent to the administrator.

PHPUnit in versions 12.5.21 and 13.1.5 forwards PHP INI settings to child processes as command-line arguments without neutralizing INI metacharacters. This allows an attacker to inject additional INI directives, potentially leading to remote code execution.

Brave CMS prior to commit 6c56603 stored page and article body content entered by editor-role users through CKEditor verbatim in the database. As a result, any JavaScript or HTML injected by them was permanently stored and executed in every visitor's browser upon page load.

Versions of fohrloop dash-uploader from 0.1.0 to 0.7.0a2 have multiple unauthenticated denial-of-service (DoS) issues. The chunked-upload handler does not validate attacker-controlled upload parameters, leading to various issues such as out-of-memory process crashes.

Dolibarr is an enterprise resource planning (ERP) and customer relationship management (CRM) software package. Versions 22.0.2 and earlier contain an authenticated remote code execution vulnerability that allows authenticated administrators to execute arbitrary PHP code on the server.

In the multi-agent system PraisonAI prior to version 4.6.37, a vulnerability allows the exploitation of symlinks to write arbitrary data to a chosen location on the victim's filesystem. The issue stems from the lack of validation for member.linkname and not rejecting symlink/hardlink members.

PraisonAI is a multi-agent teams system. Prior to versions 4.6.37 for praisonai and 1.6.37 for praisonaiagents, the system resolves unresolved tool names against module globals and __main__, potentially leading to unintended application calls.

PraisonAI is a multi-agent teams system that in versions from 2.5.6 to before 4.6.34 ships a Flask API server with authentication disabled by default. This allows anyone who can reach the server to invoke the workflow from agents.yaml without providing a token.

In the multi-agent system PraisonAI, versions from 4.5.139 to before 4.6.32 have a vulnerability related to unauthorized file imports. The tool_override.py file lacks safeguards, allowing remote code execution by an attacker.

SEPPmail Secure Email Gateway before version 15.0.4 contains a server-side template injection vulnerability in the new GINA UI. An attacker can upload a controlled template, allowing for the execution of arbitrary template expressions and potentially achieving remote code execution depending on the enabled template plugins.

SEPPmail Secure Email Gateway before version 15.0.4 contains an unauthenticated path traversal vulnerability in the identifier parameter of /api.app/attachment/preview that allows remote attackers to read arbitrary local files and trigger deletion of files in the targeted directory with the privileges of the api.app process.

A vulnerability has been identified in the Linux kernel related to the processing of SIDs in the context of NFS. The issue lies in the parse_dacl() function potentially reading data beyond the bounds of the ACE, which could lead to unauthorized access.

A vulnerability has been identified in the Linux kernel that leads to improper access to hypervisor-owned memory on Monaco-based platforms. This issue results in 'Synchronous External Abort' exceptions and kernel crashes.

In the Linux kernel netfilter flowtable subsystem, the maximum number of hardware offload actions is insufficient for IPv6, causing errors. The patch raises the limit to 24 and adds strict checking.

W jądrze Linuxa zidentyfikowano podatność związana z podwójnym zwolnieniem pamięci w funkcji cpufreq_dbs_governor_init(). Problem występuje, gdy kobject_init_and_add() kończy się niepowodzeniem, co prowadzi do wielokrotnego wywołania funkcji zwalniającej pamięć.

A vulnerability related to use-after-free (UAF) in the le_read_features_complete function has been fixed in the Linux kernel, which could lead to memory management errors.

A vulnerability has been identified in the Linux kernel's interrupt handling for the ADXL380 accelerometer, allowing for reading more FIFO entries than actually available. The issue arises from a mismatch between how the sensor fills the FIFO and the number of active channels.