CVE Vulnerability Catalog

A stored cross-site scripting (XSS) vulnerability in the VLAN configuration of RELY-PCIe versions v22.2.1 to v23.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.

In the Linux kernel netfilter flowtable, the extack structure was not initialised before use in the flow offload path. This can lead to use of uninitialised memory.

When curl is told to use the Certificate Status Request TLS extension (OCSP stapling) to verify the server certificate, it might fail to detect some OCSP problems and wrongly consider the response as fine. If the returned status reports an error other than 'revoked' (e.g. 'unauthorized'), it is not treated as a bad certificate.

Security feature bypass vulnerability in Windows Mark of the Web. Could allow execution of dangerous files without warning.

Information disclosure vulnerability in Microsoft Outlook for iOS. Could allow unauthorized access to data.

An information disclosure vulnerability in the Windows Remote Desktop Licensing Service. Technical details are not available in the description.

A vulnerability in Windows Kernel-Mode Driver allows information disclosure. An attacker could exploit this flaw to access data that should be protected.

A vulnerability in Windows Authentication allows information disclosure. An attacker could exploit this flaw to access authentication data or other sensitive information.

A vulnerability in Windows Hyper-V allows a denial of service (DoS) attack. An attacker could exploit this flaw to disrupt the service.

Denial of Service vulnerability in Windows Networking. An attacker could cause the service to crash or become unavailable.

Denial of service vulnerability in Windows Remote Desktop Licensing Service. An attacker could cause the licensing service to crash, preventing use of Remote Desktop services.

Denial of service vulnerability in Windows Standards-Based Storage Management Service. Could allow disruption of storage management services.

A path traversal vulnerability in Fortinet FortiClientEMS allows an attacker to perform a denial of service, read or write a limited number of files via specially crafted HTTP requests.

W Mbed TLS przed wersją 2.28.9 oraz 3.x przed wersją 3.6.1 występuje problem, w którym wybrany przez użytkownika algorytm nie jest używany. Włączenie MBEDTLS_PSA_HMAC_DRBG_MD_TYPE nie powoduje, że subsystem PSA korzysta z HMAC_DRBG, a jedynie wtedy, gdy MBEDTLS_PSA_CRYPTO_EXTERNAL_RNG i MBEDTLS_CTR_DRBG_C są wyłączone.

W Trusted Firmware-M do wersji 2.0.0 odkryto problem związany z brakiem weryfikacji argumentów w subsystemie logowania, co umożliwia atakującym odczytanie wrażliwych danych za pomocą funkcji logowania.

In the Linux kernel bonding module, bond_ipsec_offload_ok dereferenced a pointer without checking for an active slave. This leads to a null pointer dereference.

In the Linux kernel, a null pointer dereference vulnerability exists in the bonding module's xfrm handling. When changing the active interface in a bond, real_dev is set to NULL, which can cause a kernel oops and system crash if xfrm offload callbacks are invoked concurrently.

A buffer overflow vulnerability in Micron Crucial MX500 Series SSDs (firmware M3CR046) allows an attacker to send specially crafted ATA packets from the host to the drive controller, potentially leading to uncontrolled device behavior. The vendor states that this vulnerability was fully remediated in December 2024, and updated firmware is available through Crucial's official support page.

In the Linux kernel, pti_clone_pgtable() had alignment assumptions on the start address, notably it hard assumes start is PMD aligned. This is true on x86_64, but not on i386. These assumptions can cause the end condition to malfunction, leading to a 'short' clone. The fix uses the correct increment form for addr to avoid alignment assumptions.