CVE Vulnerability Catalog

In the Linux kernel, a bug in drm/i915 causes a NULL pointer dereference during system suspend when fbdev is not initialized (e.g., on platforms without a display). The intel_fbdev_set_suspend function accesses an uninitialized structure, leading to a kernel oops.

In the Linux kernel, memory leaks on error paths in the fake_get_pages function used by i915 selftests were fixed. The leaks cause gradual consumption of kernel memory while the tests run.

In the Linux kernel OPP subsystem, dev_pm_opp_get_required_pstate() dereferences the opp pointer before the IS_ERR_OR_NULL() check, potentially causing a NULL pointer dereference. The fix removes the early dereference and accesses opp_table directly where used.

In the Linux kernel, a memory leak vulnerability was resolved in ext4 in the ext4_fname_setup_filename() and ext4_fname_prepare_lookup() functions. If filename casefolding fails, memory from the fscrypt_name struct, namely the 'crypto_buf.name' member, is leaked in the error path.

In the Linux kernel, an overflow vulnerability was resolved in bnxt_get_nvram_directory() in the bnxt driver. An arithmetic expression may overflow due to failure to cast operands to a larger data type before performing arithmetic.

In the Linux kernel, a vulnerability was resolved in the spi bcm-qspi driver, which returns success in probe when neither 'hif_mspi' nor 'mspi' resources are present. This leads to a null pointer access on removal, as platform_get_drvdata() returns NULL which is then dereferenced.

In the Linux kernel, there is a bug in the exception handling annotation of clear_user_rep_good() on x86. The exception table annotation points to the register move instruction instead of the actual user memory access instruction, so a user access exception is not properly handled and results in a kernel oops instead of returning -EFAULT.

In the Linux kernel, in the AMD display driver (drm/amd/display), the dm_resume function may dereference a NULL pointer if 'aconnector->dc_link' is null. The fix adds a check at the beginning of the loop to avoid this issue.

In the Linux kernel, in the AMDGPU driver, the amdgpu_bo_validate_size() function does not check whether the TTM domain manager for the requested memory exists, which can lead to a kernel oops when dereferencing 'man'. The fix adds a check that the manager pointer is not NULL.

A weakness has been identified in SourceCodester Hotel and Lodge Management System 1.0. The impacted element is an unknown function of the file /profile.php of the component Profile Page. Executing manipulation of the argument image can lead to unrestricted upload. The attack may be launched remotely. The exploit has been made available to the public and could be exploited.

A denial of service vulnerability exists in the ModbusTCP server functionality of OpenPLC _v3 a931181e8b81e36fadf7b74d5cba99b73c3f6d58. A specially crafted series of network connections can lead to the server not processing subsequent Modbus requests. An attacker can open a series of TCP connections to trigger this vulnerability.

Insufficiently Protected Credentials in the Crowdstrike connector can lead to Crowdstrike credentials being leaked. A malicious user can access cached credentials from a Crowdstrike connector in another space by creating and running a Crowdstrike connector in a space to which they have access.

A SQL Injection vulnerability was discovered in the CLI functionality due to improper validation of an input parameter. An authenticated user with limited privileges can execute arbitrary SELECT SQL statements on the DBMS used by the web application.

A SQL Injection vulnerability was discovered in the Alert functionality due to improper validation of an input parameter. An authenticated user with limited privileges can execute arbitrary SELECT SQL statements on the DBMS used by the web application.

A SQL Injection vulnerability was discovered in the Smart Polling functionality due to improper validation of an input parameter. An authenticated user with limited privileges can execute arbitrary SELECT SQL statements on the DBMS used by the web application.

An IDOR vulnerability in Negotiator v3.15.2 from BBMRI-ERIC allows an attacker to access or modify unauthorized resources by manipulating the 'userID' parameter in requests to '/api/v3/users/<userID>'. This may result in exposure or alteration of sensitive data.

Stored Cross-Site Scripting (XSS) in Biobanking and Biomolecular Resources Negotiator v3.15.2 (BBMRI-ERIC) due to lack of proper validation of user input when sending a POST request with parameter text in '/api/v3/negotiations/<postUID>/posts'. This could allow a remote user to send a specially crafted query to an authenticated user and steal their cookie session details.

A weakness in PHPGurukul Cyber Cafe Management System 1.0 in /search.php (POST Parameter Handler) allows manipulation of the searchdata argument leading to cross-site scripting. The attack can be executed remotely, and the exploit is publicly available.

A cross site scripting vulnerability was detected in jakowenko double-take up to version 1.13.1 in the app.use function of the file api/src/app.js of the API component. Manipulation of the X-Ingress-Path argument allows remote attack execution. Upgrading to version 1.13.2 resolves the issue.

In code-projects Simple Banking System 1.0, a SQL injection vulnerability exists in an unknown function of the file /transfermoney.php. Manipulation of the argument ID leads to SQL injection. The attack can be performed remotely, and the exploit has been publicly disclosed.