CVE Vulnerability Catalog

A vulnerability in Grandstream UCM6510 version 1.0.20.52 and earlier allows a remote attacker to obtain sensitive information through the login function at /cgi and /webrtccgi paths.

Grandstream Networks UCM6510 version 1.0.20.52 and earlier lacks proper restriction of excessive authentication attempts. An attacker can perform unlimited login attempts with different passwords, enabling a brute force attack to gain access to targeted accounts.

Podatność CVE-2025-6060 dotyczy niewłaściwej neutralizacji danych wejściowych podczas generowania stron internetowych w oprogramowaniu DECE Geodi, co umożliwia ataki typu Cross-Site Scripting (XSS). Problem ten dotyczy wersji Geodi przed 9.0.146.

The openssl crate for Rust before version 0.10.55 allows an out-of-bounds read when an empty string is passed to X509VerifyParamRef::set_host.

A flaw was found in the SFTP server message decoding logic of libssh. An incorrect packet length check allows an integer overflow on 32-bit systems when handling large payload sizes, leading to failed memory allocation and server process crash, resulting in denial of service.

A Cross Site Scripting (XSS) vulnerability in tawk.to Live Chat plugin version 1.6.1 allows a remote attacker to execute arbitrary JavaScript code in the victim's browser. The issue stems from insufficient input validation and encoding of user-supplied data that is stored and displayed by the application.

In the Linux kernel, the ASoC SOF Intel hda component has a memory leak because sof_pdata->tplg_filename can be overwritten when the address was allocated by kstrdup(). The leak was detected by kmemleak.

CloudClassroom-PHP Project v1.0 contains a SQL injection vulnerability via the viewid parameter. An attacker can exploit this flaw to execute unauthorized database queries.

In the Linux kernel, the drm/amdgpu driver added basic validation for the RAS header. If the RAS header read from EEPROM is corrupted, it could result in trying to allocate huge memory for reading the records; validation of header fields was added.

The Apwide Golive 10.2.0 Jira plugin is vulnerable to Server-Side Request Forgery (SSRF) via the test webhook function. An attacker can exploit this function to send requests to internal network resources.

In the Linux kernel, the IB/mlx5 driver has a potential deadlock during memory region (MR) deregistration. The issue occurs when kzalloc() is called while holding umem_mutex, which can lead to re-entering the same path and deadlocking. The fix releases umem_mutex before performing memory allocations.

In the Linux kernel, additional checks for DSC / HUBP ONO guarantees were added in drm/amd/display. For non-zero DSC instances, the HUBP domain required to drive it for sequential ONO ASICs may not be met, potentially causing the tile logic to enter an undefined state leading to a system hang.

In the Linux kernel on s390, do_secure_storage_access() incorrectly handled accesses to non-exported pages in atomic context by trying to resolve the page fault and taking mmap_lock, which is not allowed. This triggered sleeping-function-in-invalid-context warnings. The fix treats such accesses as unmapped pages, returning -EFAULT.

In the Linux kernel, the drm/xe driver has a bug that attempts to take an invalid lock when handling a device wedge. If the device wedges, e.g., during GuC upload, the wedge call tries to use an uninitialized lock, triggering a DEBUG_LOCKS_WARN_ON warning.

Podatność CVE-2025-5254 dotyczy niewłaściwej neutralizacji danych wejściowych podczas generowania stron internetowych w Kron Technologies Kron PAM, co pozwala na ataki typu Stored XSS. Problem ten dotyczy wersji Kron PAM przed 3.7.

Podatność w Kron Technologies Kron PAM, dotycząca przydzielania zasobów bez ograniczeń lub throttlingu, umożliwia przeprowadzenie ataku DoS za pomocą HTTP. Problem dotyczy wersji Kron PAM przed 3.7.

A flaw in libssh causes a NULL pointer dereference when calculating the session ID during the key exchange (KEX) process due to an allocation failure in cryptographic functions. This can crash the client or server.

A heap overflow vulnerability was discovered in Tenda AC8V4 firmware version V16.03.34.06 in the /goform/GetParentControlInfo function. Manipulation of the mac argument leads to a heap-based buffer overflow.

A stack overflow vulnerability was discovered in Tenda AC8V4 firmware version V16.03.34.06 in the /goform/WifiGuestSet function. Manipulation of the shareSpeed argument leads to a stack-based buffer overflow.

A stack overflow vulnerability was discovered in the Tenda AC8V4 router version V16.03.34.06 in the /goform/SetSysTimeCfg function. Manipulation of the timeZone and timeType arguments can lead to a stack-based buffer overflow.