CVE Vulnerability Catalog

An improper access check allowed low privileged users to edit the task types of existing scheduler tasks.

Vulnerability in FastNetMon Community Edition up to version 1.2.9. A local attacker can exploit predictable file paths in /tmp to overwrite arbitrary files as the FastNetMon user (typically root).

Bugsink is a self-hosted error tracking tool. Prior to 2.2.0, Bugsink resolved sourcemaps and debug files by debug ID without scoping that lookup to the project that owned the uploaded metadata. An authenticated user with access to one project could cause event processing in that project to use sourcemap/debug-file metadata uploaded for another project in the same Bugsink instance, if the same debug ID was referenced.

Algernon prior to version 1.17.7 has a vulnerability in the SSE event server where the Access-Control-Allow-Origin header is hardcoded to '*', allowing third-party pages to read the filename stream via JavaScript.

The Algernon web server before version 1.17.7 bound the SSE event server to 0.0.0.0:5553 by default on Linux/macOS, allowing external access. This vulnerability is fixed in version 1.17.7.

In the Linux kernel, the Bluetooth L2CAP stack lacks a NULL check in the l2cap_sock_get_sndtimeo_cb() function, which can lead to a NULL pointer dereference.

In the Linux kernel, the Bluetooth L2CAP stack lacks a NULL check in the l2cap_sock_new_connection_cb() function, which can lead to a NULL pointer dereference.

In the Linux kernel, a null-ptr-deref bug in the function l2cap_sock_state_change_cb() in the Bluetooth L2CAP stack has been fixed. A missing NULL check was added, similar to that in l2cap_sock_resume_cb() and l2cap_sock_ready_cb().

Vowpal Wabbit has a vulnerability in the GitHub Actions workflow (python_checks.yml) where the pull request title is directly embedded in double-quoted bash strings. This allows an attacker to execute arbitrary commands on the runner via a crafted PR title. The vulnerability affects PRs targeting any branch.

Bugsink, a self-hosted error tracking tool, prior to version 2.1.3 has a vulnerability in webhook URL validation. A mismatch in URL parsing between Python and the requests library allows bypassing validation, so a URL may appear to target an allowed public host while the HTTP request actually goes to a different server.

Traccar before 6.13.0 has a vulnerability in DeviceResource.uploadImage that authorizes the device only via Condition.Permission, but does not check readonly/deviceReadonly for non-admins. An unauthorized user can replace a device's image in the server media directory.

Lack of CSRF token validation in the admin activation endpoint of com_users leads to a CSRF attack vector. An attacker can trick an administrator into performing unauthorized actions.

Lack of output escaping leads to an XSS vector in the readmore links for com_content.

Lack of output escaping leads to an XSS vector in the content history component.

Lack of output escaping leads to an XSS vector in the multilingual associations component.

Lack of output escaping leads to a Cross-Site Scripting (XSS) vulnerability in the feed modules. An attacker can inject malicious scripts that execute in the victim's browser.

IBM Cloud Pak for Data System - Cyclops 11.3.0.2 through Interim Fix 002 uses default passwords from the manufacturing process during installation. This could allow an attacker to bypass authentication.

IBM Cloud Pak for Data System - Cyclops versions 11.3.0.2 through Interim Fix 002 is vulnerable to SQL injection. A remote attacker can send crafted SQL statements to view, add, modify, or delete data in the backend database.

IBM Financial Transaction Manager for SWIFT Services for Multiplatforms versions 3.2.4.0 through 3.2.4.15 is vulnerable to cross-site scripting. An unauthenticated attacker can embed arbitrary JavaScript code in the Web UI, altering intended functionality and potentially leading to credentials disclosure within a trusted session.

IBM watsonx.data versions 2.2 through 2.3.1 do not properly restrict inbound and outbound connections, which could allow an attacker to transfer or modify files without restrictions.