CVE Vulnerability Catalog

Podatność w aplikacji Tap&Sign przed wersją 1.025 polega na przechowywaniu wrażliwych informacji w zmiennych środowiskowych w postaci niezaszyfrowanej oraz na słabym mechanizmie odzyskiwania hasła, co umożliwia wykorzystanie tych luk do nieautoryzowanego dostępu.

In the Linux kernel, a vulnerability in the USB gadget subsystem allows device_del() to schedule new work in the gadget->work workqueue. The fix moves flush_work() after device_del() to ensure the workqueue is cleaned up.

In the Linux kernel, the USB gadget f_midi driver incorrectly set MIDI Streaming descriptor lengths (bNumEmbMIDIJack and bLength). When the numbers of in and out ports differ, the host receives broken descriptors with uninitialized stack memory leaking into the descriptor.

In the Linux kernel PCI subsystem, the policy of putting PCIe ports into D3 during suspend causes a system hang on the TUXEDO Sirius 16 Gen 1 with a specific old BIOS. The fix adds a quirk to prevent affected root ports from entering D3hot on this hardware/BIOS combination.

In the Linux kernel, tomoyo_write_control() emits a too-large allocation warning when a very long line without a newline is written. The fix uses __GFP_NOWARN instead of checking KMALLOC_MAX_SIZE, as valid lines should be shorter than 32KB.

In the Linux kernel ASoC (soc-pcm) component, the soc_pcm_ret() helper was used in the .prepare callback, causing -EINVAL errors to be ignored in many places. The fix avoids using soc_pcm_ret() in that callback to prevent over-broad error suppression.

A vulnerability in the Linux kernel's team module allows adding a device that is already a lower device of another team interface. This leads to recursive locking and a potential deadlock in team_device_event.

In the Linux kernel, a vulnerability exists where dev_pm_opp_find_bw_*() functions crash with a NULL pointer dereference if the bandwidth table is not initialized. This occurs when interconnect properties are missing in the OPP consumer node.

In the Linux kernel, the wifi rtlwifi driver was fixed for memory leaks and invalid access on the probe error path. On init_sw_vars failure, rtl_deinit_core should not be called, and missing rtl_pci_deinit and deinit_sw_vars calls caused memory leaks; the unnecessary pci_set_drvdata call was also removed.

In the Linux kernel, a vulnerability in the mac80211 subsystem allows deactivating all links via the debugfs interface, triggering a WARN_ON that indicates an internal bug.

In the Linux kernel, a vulnerability in the UBIFS filesystem causes a null pointer dereference when dumping the TNC tree after clearing the slab cache. The pointer c->zroot.znode becomes NULL, leading to a system crash.

In the Linux kernel's remoteproc subsystem, a bug was found where ida_free is called for an ID that was not previously allocated by ida_alloc. The issue occurs in the rproc_alloc function when an error happens before ida_alloc is called, and then in the release path (rproc_type_release) an attempt is made to free an unallocated ID, triggering a kernel warning.

In the Linux kernel, the ipmi ipmb module did not check the value returned by devm_kasprintf(), which can be a NULL pointer on failure. The missing check may lead to invalid memory access.

W systemie zarządzania rezerwacjami AtaksAPP występuje podatność na atak typu Cross-Site Scripting (XSS) z powodu niewłaściwej neutralizacji danych wejściowych podczas generowania stron internetowych. Problem dotyczy wersji przed 4.2.3.

Scanning certain QR codes that included text with a website URL could allow the URL to be opened without presenting the user with a confirmation alert first. This vulnerability was fixed in Firefox for iOS 136.

Websites redirecting to a non-HTTP scheme URL could allow a website address to be spoofed for a malicious page. This vulnerability was fixed in Firefox for iOS 136.

Memory safety bugs present in Firefox 135, Thunderbird 135, Firefox ESR 128.7, and Thunderbird 128.7. Some showed evidence of memory corruption, potentially exploitable to run arbitrary code. Fixed in Firefox 136, Firefox ESR 128.8, Thunderbird 136, and Thunderbird 128.8.

A web page could trick a user into setting that site as the default handler for a custom URL protocol. Fixed in Firefox 136, Firefox ESR 128.8, Thunderbird 136, and Thunderbird 128.8.

The vulnerability allowed interrupting RegExp processing and running additional JavaScript, potentially triggering garbage collection when the engine was not expecting it. Fixed in Firefox 136, Firefox ESR 128.8, Thunderbird 136, and Thunderbird 128.8.