CVE Vulnerability Catalog

A misconfiguration flaw was found in Keycloak. This issue can allow an attacker to redirect users to an arbitrary URL if a 'Valid Redirect URI' is set to http://localhost or http://127.0.0.1, enabling sensitive information such as authorization codes to be exposed to the attacker, potentially leading to session hijacking.

W podatności CVE-2024-6877 występuje niewłaściwa neutralizacja danych wejściowych podczas generowania stron internetowych w Eliz Software Panel, co pozwala na ataki typu Reflected XSS. Problem dotyczy wersji Panelu przed 2.3.24.

W panelu Eliz Software występuje podatność na XSS (Cross-site Scripting) z powodu niewłaściwej neutralizacji danych wejściowych podczas generowania stron internetowych. Problem dotyczy wersji panelu przed 2.3.24.

Podatność CVE-2024-5682 dotyczy systemu automatyzacji bibliotek Yordam przed wersją 20.1, gdzie niewłaściwe ograniczenie nadmiernych prób uwierzytelnienia umożliwia manipulację interfejsem. Problem ten może prowadzić do nieautoryzowanego dostępu do systemu.

In the Linux kernel, a bug in tcp_bpf_sendmsg() can cause a negative 'copied' value when corking messages in psock->cork, leading to a BUG() at net/socket.c:733 and a kernel panic. The vulnerability has been fixed.

In the Linux kernel, in the DRM subsystem for AMD Display, validation of function return values was added. Previously, return values were not checked before using data in subsequent functions, which could lead to errors. This fixes four CHECKED_RETURN issues reported by Coverity.

W jądrze systemu Linux zidentyfikowano podatność, która występuje podczas resetowania interfejsu sieciowego. Wywołanie funkcji ethtool w trakcie resetu może prowadzić do dereferencji wskaźnika NULL, co skutkuje awarią systemu.

In the Linux kernel, the maximum size of a subrequest that writes to cachefiles was set to MAX_RW_COUNT to prevent overrunning the maximum write to the backing filesystem.

In the Linux kernel, a vulnerability was resolved in the uinput interface where requests with an unreasonable number of slots can cause memory allocation failure and burden the system. A limit of 100 slots was introduced.

In the Linux kernel, the SMB server fixed a potential null pointer dereference in smb2_open() that occurred when the oplock level was SMB2_OPLOCK_LEVEL_LEASE and parse_lease_state() returned NULL. The fix checks whether lease_ctx_info is NULL.

In the Linux kernel, the drm/amd/display driver was fixed to check the index for the aux_rd_interval array of size 7 before use. This addresses 3 OVERRUN and 1 INTEGER_OVERFLOW issues reported by Coverity.

Under the default configuration, Devise-Two-Factor versions >= 2.2.0 and < 6.0.0 generate TOTP shared secrets that are 120 bits instead of the 128-bit minimum defined by RFC 4226. A shorter shared secret makes it easier for an attacker to guess the secret and generate valid TOTP codes.

In MISP before version 2.4.198, the UserLoginProfilesController.php does not prevent an org admin from viewing sensitive login fields of another org admin in the same org.

Ansible has a flaw where sensitive information stored in Ansible Vault files can be exposed in plaintext during playbook execution. This occurs when using tasks like include_vars without the no_log: true parameter, causing sensitive data to be printed in output or logs.

In the Linux kernel, pg_net_init() in pktgen does not use cpus_read_lock() around the for_each_online_cpu loop, which can trigger WARN_ON warnings. The fix adds the lock and changes WARN_ON to WARN_ON_ONCE.

In the Linux kernel, ethtool does not check if the device is present when getting link settings, which can lead to a race with device reset or removal and a NULL pointer dereference. This can cause a system crash.

User enumeration vulnerability in ORDAT FOSS-Online before v2.24.01 allows attackers to determine if an account exists by comparing server responses from the forgot password functionality.

ORDAT FOSS-Online before version 2.24.01 was discovered to contain a reflected XSS vulnerability on the login page. An attacker can inject malicious script via a crafted request.

Podatność CVE-2024-2010 dotyczy niewłaściwej neutralizacji tagów HTML związanych z skryptami w stronach internetowych w TE Informatics V5, co pozwala na ataki typu Reflected XSS. Problem ten występuje w wersjach V5 przed 6.2.

Information disclosure vulnerability in Microsoft Edge (Chromium-based). Could allow unauthorized access to data.