CVE Vulnerability Catalog

FastGPT versions up to 4.14.13 have weak resource isolation in the code-sandbox component. Lack of strict OS-level constraints (e.g., cgroups) allows attackers to bypass memory checks and exhaust the JavaScript worker pool, causing a complete Denial of Service (DoS).

Vim before version 9.2.0383 has an OS command injection vulnerability in the netrw standard plugin via a crafted URL (e.g., sftp:// or file://). User interaction is required.

OpenMcdf to biblioteka .NET / C# do manipulacji plikami w formacie Compound File Binary. W wersjach przed 3.1.3 nie wykrywa cykli w drzewie czerwono-czarnym wpisów katalogowych, co może prowadzić do nieskończonej pętli przy przetwarzaniu plików CFB z cyklem w łańcuchu LeftSiblingID / RightSiblingID.

Marko is a declarative, HTML-based language for building web apps. Prior to marko version 5.38.36 and prior to @marko/runtime-tags 6.0.164, when dynamic text is interpolated into a <script> or <style> tag the Marko runtime failed to prevent tag breakout when the closing tag used non-lowercase casing. An attacker able to place input inside a <script> or <style> block could break out of the tag with </SCRIPT>, </Style>, etc. and inject arbitrary HTML/JavaScript, resulting in cross-site scripting. This issue has been patched in marko version 5.38.36 and @marko/runtime-tags 6.0.164.

A vulnerability in the Linux kernel related to the lifecycle of the network device has been fixed, where the network device outlived its parent gadget device during disconnection, leading to sysfs link issues and null pointer dereference problems.

A vulnerability was found in the Linux kernel's bh1780 light sensor driver, causing a PM runtime reference count leak on the error path. The issue occurs because pm_runtime_put_autosuspend() is not called when a read operation fails, leading to improper power management state.

Aplikacja Password Pusher, służąca do komunikacji wrażliwych informacji w sieci, miała problem z bezpieczeństwem, który pozwalał na nieautoryzowane tworzenie przesyłek plikowych przez ogólny interfejs API JSON w określonych konfiguracjach. Problem ten został naprawiony w wersjach 1.69.3 i 2.4.2.

In the Linux kernel, the perf/x86/intel/uncore subsystem has bugs in die ID initialization and lookup. In some cases, uncore_device_to_die() may return -1, leading to skipped UBOX devices or incorrect error handling. The fix uses uncore_pcibus_to_dieid(), which works regardless of NUMA being enabled.

A vulnerability has been identified in the Linux kernel related to the load_segments() function, which invalidates the GS base relied upon by KCOV. When CONFIG_KCOV is enabled, calls to instrumented C code can lead to kernel crashes in an endless loop.

W jądrze Linuxa naprawiono podatność związaną z inwersją blokady między mutexami spi_lock i buf_lock w sterowniku spidev. Problem ten mógł prowadzić do zakleszczeń z powodu różnego porządku nabywania blokad w różnych ścieżkach kodu.

A vulnerability has been identified in the Linux kernel related to the call of the generic_handle_irq() function in a non-interrupt context. This issue occurs when resuming the system from suspend on Tegra platforms, leading to a warning in the logs.

In the Linux kernel's ext4 filesystem, a vulnerability causes a kernel panic when mounting a partition with quota and project features enabled. The issue arises from using an uninitialized per-CPU counter during block bitmap validation when the DOUBLE_CHECK macro is defined. The fix moves the initialization of the counters before the block allocator initialization.

Due to multiple time-of-check time-of-use race conditions in the resource count check and increment logic, as well as missing validations, users can exceed allocation limits configured for their accounts/domains. This can be used to degrade infrastructure resources and lead to denial of service. Users are recommended to upgrade to Apache CloudStack versions 4.20.3.0 or 4.22.0.1, or later.

The CloudStack Backup plugin has improper access logic in versions 4.21.0.0 and 4.22.0.0. Any authenticated user with access to specific APIs can create new VMs using backups of any other user.

The CloudStack Backup plugin has improper authorization logic in versions 4.21.0.0 and 4.22.0.0. Any authenticated user with access to specific APIs can list backups from any account, but cannot see the contents.

A vulnerability in BC-LTS and BC-FJA libraries from Legion of the Bouncy Castle Inc. on X86_64 with AVX and AVX-512f extensions on Linux. The issue involves program files gcm128w, gcm512w, gcm128w.C, and gcm512w.C.

Nokia Broadcast Message Center (BMC) before 13.1 allows an unauthenticated remote attacker to do OS command injection as root via shell metacharacters in the Log Scanner Search Pattern field.

An Out-of-bounds Read vulnerability in the IOCTL handler in ASUS System Control Interface allows a local user to cause system crash (BSOD) via a read size that exceeds the buffer size.

Wykryto podatność w 8421bit MiniClaw, dotycząca funkcji executeCognitivePulse w pliku src/kernel.ts. Manipulacja tą funkcją prowadzi do zdalnego wstrzyknięcia poleceń systemowych.

Vvveb before version 1.0.8.2 contains an unauthenticated reflected cross-site scripting vulnerability in the visual editor preview renderer. Attackers can exploit the 'r' query parameter and '_component_ajax' POST parameter to inject and execute arbitrary JavaScript in the context of the Vvveb origin.