CVE Vulnerability Catalog

An issue was discovered in the Linux kernel before version 6.2.9 related to a use-after-free in the bq24190_remove function in bq24190_charger.c. This could allow a local attacker to crash the system due to a race condition.

An issue was discovered in Qt versions 5.x before 5.15.14, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1 related to QDnsLookup, allowing for a buffer over-read via a crafted reply from a DNS server.

The remote keyfob system on Nissan Sylphy Classic 2021 sends the same RF signal for each door-open request, allowing for a replay attack.

In Hazelcast versions 5.0.4, 5.1 through 5.1.6, and 5.2 through 5.2.3, configuration routines do not properly mask passwords in member configuration, allowing Hazelcast Management Center users to view some secrets.

There is an LDAP bind credentials exposure on KACE Systems Deployment and Remote Site appliances 9.0.146. The captured credentials may provide a higher privilege level on the Active Directory domain.

Versions of Akka HTTP before 10.5.2 have a problem with the permissions of temporary files created during file uploads. These files have weak permissions, allowing other users to read them on Linux and UNIX systems.

Linux kernel 6.3 has a use-after-free vulnerability in the iopt_unmap_iova_range function in drivers/iommu/iommufd/io_pagetable.c.

Vulnerability in Telegram 9.3.1 and 9.4.0 allows attackers to access restricted files, microphone, or video recording via the DYLD_INSERT_LIBRARIES flag.

Dell CloudIQ Collector version 1.10.2 contains a missing encryption of sensitive data vulnerability. An attacker with low privileges could potentially exploit it, leading to unauthorized data access.

The Linux kernel before version 6.2.9 has a race condition and resultant use-after-free in emac.c if a physically proximate attacker unplugs an emac based device.

Improper Authorization in RestAPI in Checkmk GmbH's Checkmk versions <2.1.0p28 and <2.2.0b8 allows remote authenticated users to read arbitrary host_configs.

Bludit v3.14.1 is vulnerable to Stored Cross Site Scripting (XSS) via an SVG file on the site logo. The product's security model trusts users to insert arbitrary content, and users cannot create their own accounts through self-registration.

The Jenkins LoadComplete support Plugin version 1.0 and earlier does not escape the LoadComplete test name, leading to a stored XSS vulnerability.

The WSO2 Oauth Plugin for Jenkins version 1.0 and earlier has a cross-site request forgery (CSRF) vulnerability that allows attackers to trick users into logging into the attacker's account.

WSO2 Oauth Plugin for Jenkins version 1.0 and earlier does not invalidate the previous session on login.

A missing permission check in Jenkins Tag Profiler Plugin 0.2 and earlier allows attackers with Overall/Read permission to reset profiler statistics.

The Tag Profiler plugin in Jenkins version 0.2 and earlier has a cross-site request forgery (CSRF) vulnerability that allows attackers to reset profiler statistics.

The Jenkins TestComplete support Plugin version 2.8.1 and earlier does not escape the TestComplete project name, leading to a stored cross-site scripting (XSS) vulnerability. Attackers with Item/Configure permissions can exploit this flaw.

A missing permission check in Jenkins AppSpider Plugin 1.0.15 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL and send an HTTP POST request with a JSON payload consisting of attacker-specified credentials.

A missing permission check in Jenkins SAML Single Sign On (SSO) Plugin 2.0.0 and earlier allows attackers with Overall/Read permission to send an HTTP POST request with JSON body containing attacker-specified content to miniOrange's API for sending emails.