CVE Vulnerability Catalog

W bibliotece GNU elfutils w wersji 0.192 zidentyfikowano krytyczną podatność, która dotyczy funkcji __libdw_thread_tail w pliku libdw_alloc.c komponentu eu-readelf. Manipulacja argumentem w prowadzi do uszkodzenia pamięci.

A stored cross-site scripting (XSS) vulnerability exists in the management interface of WatchGuard Firebox appliances via the Blocked Sites list. An authenticated remote attacker with administrator privileges could exploit this vulnerability to execute arbitrary JavaScript code in the Firebox management interface of another management user.

A stored XSS vulnerability exists in the management interface of WatchGuard Firebox appliances via the spamBlocker module. An authenticated remote attacker with administrator privileges could execute arbitrary JavaScript code in the management interface of another user.

An Improper Input Validation vulnerability in WatchGuard Fireware OS allows an attacker with network access to manipulate the HTTP Host header in requests to the Web UI. This could redirect users to malicious websites, poison the web cache, or inject malicious JavaScript into responses.

In MISP before version 2.4.198, the app/Model/Attribute.php file ignores ACL rules during a GUI attribute search.

In the Linux kernel, when mremap()ing a memory region registered with userfaultfd as write-protected without UFFD_FEATURE_EVENT_REMAP, an inconsistency in flag clearing occurs between vma and pte/pmd flags. This leads to a warning in page_table_check_pte_flags() upon subsequent mprotect(PROT_WRITE). The fix always explicitly clears uffd-wp pte/pmd flags during such mremap().

In the Linux kernel, a vulnerability was resolved in fs/proc regarding a softlockup in __read_vmcore (part 2). In memory-constrained environments like the kdump image, a softlockup can interfere with things like RCU freeing memory, causing the crashdump to get stuck. The fix adds a cond_resched() to the second loop in __read_vmcore.

In hostapd version 2.10 and earlier, the PKEX code remains active even after a successful PKEX association. An attacker who previously successfully bootstrapped public keys with another entity using PKEX can subvert future bootstrapping by passively observing public keys, reusing the encrypting element Qi and subtracting it from the captured message M (X = M - Qi). This yields the public ephemeral key X, the only element required to subvert the PKEX association.

A vulnerability in the OPC UA .NET Standard Stack before 1.5.374.158 allows an unauthorized attacker to bypass application authentication when using HTTPS endpoints.

In the Linux kernel, the drm/amd/display module did not initialize variables used as denominators to a non-zero value. This could lead to a divide-by-zero error (DIVIDE_BY_ZERO), as reported by Coverity.

GnuTLS relies on libtasn1 for ASN.1 data processing, where an inefficient algorithm causes excessive resource consumption when decoding certain DER-encoded certificates. A remote attacker can send a crafted certificate, causing GnuTLS to become unresponsive or slow.

A flaw in libtasn1 causes inefficient handling of specific certificate data. When processing a large number of elements in a certificate, libtasn1 takes much longer than expected, which can slow down or even crash the system. This flaw allows an attacker to send a specially crafted certificate, causing a denial of service attack.

A flaw was found in npm-serialize-javascript where the module does not properly sanitize certain inputs like regex or other JavaScript object types, allowing an attacker to inject malicious code. This code can be executed during deserialization in a web browser, leading to Cross-site scripting (XSS) attacks.

A memory leak occurs in Node.js when a remote peer abruptly closes the socket without sending a GOAWAY notification, or when nghttp2 detects an invalid header and terminates the connection. This can lead to increased memory consumption and potential denial of service.

Smartcom Ralink CPE/WiFi routers SAM-4G1G-TT-W-VC and SAM-4F1F-TT-W-A1 have a weak default WiFi password generation algorithm. This allows a remote attacker to recover the password and gain network access.

In SourceCodester Packers and Movers Management System 1.0, a Cross-Site Request Forgery (CSRF) vulnerability exists in Users.php. It allows attackers to create unauthorized admin accounts by sending crafted requests to an authenticated admin user.

A floating point exception (divide-by-zero) vulnerability was discovered in Bento4 1.6.0-641 in the AP4_TfraAtom() function of Ap4TfraAtom.cpp. A remote attacker can exploit this flaw to cause a denial of service (DoS).

The web-based management interface of Cisco ISE guest portals has XSS vulnerabilities. An authenticated attacker with administrative credentials can inject malicious code into specific pages, leading to script execution or access to sensitive data.