CVE Vulnerability Catalog

A vulnerability was found in the Linux Kernel in the intr_callback function of the file drivers/net/usb/r8152.c, related to the BPF component. The manipulation leads to logging of excessive data. The attack can be launched remotely. It is recommended to apply a patch to fix this issue.

A vulnerability was identified in Linux Kernel up to 4.19.316/5.4.278/5.10.220/5.15.161. This impacts the function tcp_getsockopt/tcp_setsockopt of the component TCP Handler. Such manipulation leads to race condition. A high complexity level is associated with this attack. The exploitability is said to be difficult.

In the Linux kernel, in the Bluetooth component in the file drivers/isdn/mISDN/l1oip_core.c, the del_timer function is vulnerable to use-after-free. The vulnerability has been classified as critical.

A vulnerability classified as critical was found in the Linux Kernel in the l2cap_reassemble_sdu function of the file net/bluetooth/l2cap_core.c, related to the Bluetooth component. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue.

A broken session control was discovered in devhub version 0.102.0, which could allow an attacker to hijack user sessions.

A critical vulnerability was found in the Linux kernel in the area_cache_get function of drivers/net/ethernet/netronome/nfp/nfpcore/nfp_cppcore.c, in the IPsec component. The manipulation leads to use after free. Applying a patch is recommended to fix this issue.

In the Linux kernel up to versions 5.10.162/5.15.85/6.0.15/6.1.1, a vulnerability was found in the libbpf component, in the btf_dump_name_dups function of tools/lib/bpf/btf_dump.c. Manipulation leads to a use-after-free. The issue is fixed in versions 5.10.163, 5.15.86, 6.0.16, 6.1.2, and 6.2.

A vulnerability was found in the Linux kernel in the ipv6_renew_options function of the IPv6 Handler component. The manipulation leads to a memory leak, and the attack can be launched remotely. Applying a patch is recommended to fix this issue.

In the Linux kernel 5.8 through 5.19.x before 5.19.16, a local attacker able to inject WLAN frames into the mac80211 stack could cause a NULL pointer dereference denial-of-service attack against beacon protection of P2P devices.

A list management bug in BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 could be used by local attackers (able to inject WLAN frames) to corrupt a linked list and potentially execute code.

A Cross-site scripting (XSS) vulnerability was found in the Blog module of Liferay Digital Experience Platform 7.3.10 SP3. It allows remote attackers to inject arbitrary JS or HTML into the name field of a new topic.

A cross-site scripting (XSS) vulnerability was discovered in mxGraph version 4.2.2 within the setTooltips() function. It allows injection of malicious JavaScript code due to improper input handling.

Flatpress v1.2.1 was discovered to contain a reflected XSS vulnerability via the 'page' parameter in admin.php. An attacker can inject malicious JavaScript code that executes in the victim's browser.

In app/Controller/UsersController.php in MISP before version 2.4.164, there is a vulnerability that allows attackers to discover role names, which should only be accessible to the site administrator.

mm/rmap.c in the Linux kernel before 5.19.7 has a use-after-free related to leaf anon_vma double reuse. This may lead to memory corruption and system instability.

mojoPortal v2.7 was discovered to contain a path traversal vulnerability via the 'f' parameter at /DesignTools/CssEditor.aspx. This allows authenticated attackers to read arbitrary files on the system.

An SSRF vulnerability in the Data Import module of Heartex Label Studio Community Edition versions 1.5.0 and earlier allows an authenticated user to access arbitrary files on the system. Additionally, self-registration is enabled by default, enabling a remote attacker to create an account and exploit the SSRF.

Bus Pass Management System v1.0 is vulnerable to reflected cross-site scripting (XSS) via the searchdata parameter. An attacker can inject malicious script that executes in the victim's browser.

In the Linux kernel through 5.19.12, roccat_report_event in drivers/hid/hid-roccat.c has a race condition and resultant use-after-free in certain situations where a report is received while copying a report->value is in progress.

A race condition and resultant use-after-free in drivers/video/fbdev/smscufx.c in the Linux kernel through 5.19.12 allows a physically proximate attacker to cause a use-after-free by removing a USB device while calling open().