CVE Vulnerability Catalog

A security flaw has been discovered in kaifangqian/kaifangqian-base up to commit 7b3faecda13848b3ced6c17c7423b76c5b47b8ab. This issue affects the function getAllUsers of the file SysUserController.java. The manipulation results in information disclosure. The attack can be launched remotely. The exploit has been released to the public and may be exploited. This product does not use versioning, so information about affected and unaffected releases is unavailable.

Dependency-Track prior to version 4.13.5 may send credentials meant for a private NuGet repository to api.nuget.org via the HTTP Authorization header, and may disclose names and versions of components marked as internal. This can happen if the instance contains .NET components, a custom NuGet repository has been configured with authentication credentials, and the repository server does not provide PackageBaseAddress resource in its service index. The issue has been fixed in 4.13.5. Workarounds include disabling custom NuGet repositories until the patch is applied, invalidating previous credentials, and generating new ones.

Dell PowerProtect Data Domain with DD OS in Feature Release versions 7.7.1.0 through 8.4, LTS2024 7.13.1.0 through 7.13.1.30, and LTS 2023 7.10.1.0 through 7.10.1.60 contains a path traversal vulnerability in the UI. An unauthenticated attacker with remote access could exploit it, leading to information exposure.

A Generation of Predictable Numbers or Identifiers vulnerability in the SDM component of B&R Automation Runtime versions before 6.4 may allow an unauthenticated network-based attacker to take over already established sessions.

Reflected cross-site scripting (XSS) vulnerabilities exist in System Diagnostics Manager (SDM) of B&R Automation Runtime versions before 6.4 that enable a remote attacker to execute arbitrary JavaScript code in the context of the attacked user's browser session.

A vulnerability in SourceCodester Hotel and Lodge Management System 1.0 in /del_tax.php allows manipulation of the ID argument leading to SQL injection. The attack can be initiated remotely, and the exploit is publicly available.

A SQL injection vulnerability was detected in SourceCodester Hotel and Lodge Management System 1.0 in the file /pages/save_tax.php. Manipulation of the percentage argument allows remote attack execution. The exploit has been publicly disclosed and may be used.

The 'zipfile' module in Python did not validate the offset value in the ZIP64 EOCD Locator record. Instead, it assumed the ZIP64 EOCD record is the previous record. This can be abused to create ZIP archives handled differently by 'zipfile' compared to other ZIP implementations. The fix maintains this behavior but checks that the offset matches the expected value.

IBM Engineering Requirements Management DOORS Next (IBM Jazz Foundation 7.0.2 to 7.0.2 iFix034, 7.0.3 to 7.0.3 iFix016, and 7.1.0 to 7.1.0 iFix004) is vulnerable to stored cross-site scripting. This vulnerability allows authenticated users on the host network to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

A SQL injection vulnerability was found in SourceCodester Hotel and Lodge Management System 1.0 in the file /del_booking.php. Manipulation of the ID argument allows remote attack execution. The exploit has been made public and could be used.

A vulnerability has been found in SourceCodester Hotel and Lodge Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /del_curr.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed to the public and may be used.

A SQL injection vulnerability was found in SourceCodester Hotel and Lodge Management System 1.0 in the file /pages/save_curr.php. Manipulation of the currcode argument causes SQL injection. The attack can be carried out remotely. The exploit has been published and may be used.

A SQL injection vulnerability was detected in SourceCodester Hotel and Lodge Management System 1.0 in the file /del_room.php. Manipulation of the ID argument results in SQL injection. The attack can be executed remotely. The exploit is now public and may be used.

A SQL injection vulnerability was detected in SourceCodester Hotel and Lodge Management System 1.0 in the file /pages/save_room.php. Manipulation of the floorno argument leads to SQL injection. Remote exploitation is possible. The exploit has been disclosed publicly and may be used.

In the Linux kernel, a memory leak vulnerability was resolved in the samsung_tty driver in s3c24xx_serial_getclk() when iterating over clocks. When a better clock is found, the previous one must be freed, and if a better match has already been found, the new one also needs to be freed, otherwise it leaks.

In the Linux kernel, handshake_nl_done_doit() contains a null-ptr-deref when socket lookup fails. It calls trace_handshake_cmd_done_err() before releasing the file, which can lead to dereferencing a freed socket and accessing an invalid address. The vulnerability can be triggered by a local user to cause a kernel panic (denial of service).

A memory leak exists in the Linux kernel TUN driver when a NAPI queue is detached (IFF_DETACH_QUEUE) and data is subsequently written to the device. After detachment, the skb is still queued to the socket's write queue, leaking sk and skb structures. The issue affects configurations with NAPI and multi-queue enabled.

In the Linux kernel, a vulnerability was resolved in xfrm where data with uninitialized structure padding is copied to user-space. Padding may contain random, possibly sensitive data that should never be given directly to user-space.

In the Linux kernel, a memory leak vulnerability was resolved in the hwmon xgene driver, where ioremap and memremap are not released in xgene_hwmon_probe(). This may cause a resource leak.

In the Linux kernel, a vulnerability was resolved in bcache where __bch_btree_node_alloc may return NULL in specific situations. This may lead to a potential NULL pointer dereference in caller functions such as the chain btree_split->bch_btree_node_alloc->__bch_btree_node_alloc.