CVE Brief Security Intelligence

A use-after-free vulnerability exists in the V8 JavaScript engine of Google Chrome, which could allow a remote attacker to execute arbitrary code via a specially crafted webpage.

A use after free vulnerability in the HTML component of Google Chrome allows remote attackers to trigger memory corruption via a crafted web page.

A use after free vulnerability exists in the Blink rendering engine of Google Chrome, potentially allowing remote attackers to achieve arbitrary code execution.

The Pimcore Admin Classic Bundle contains a SQL injection vulnerability that allows authenticated users to execute arbitrary SQL commands via the backend interface.

Insufficient verification of data authenticity in Microsoft Entra ID allows an authorized attacker to perform spoofing over a network.

A Server-Side Request Forgery (SSRF) vulnerability in the Meeting Room Booking System (MRBS) allows unauthenticated attackers to send unauthorized requests to internal or external resources.

The KiviCare WordPress plugin is vulnerable to SQL injection, which may allow an authenticated attacker to execute arbitrary database queries.

Fortinet FortiWeb contains an improper authentication vulnerability that allows unauthenticated remote attackers to bypass security controls.

The archived Cloudflare pages-action repository contains a remote code execution vulnerability originating from improper neutralization of inputs in the src/index file.

A symlink following vulnerability in KubeVirt's virt-handler migration proxy allows an attacker with specific permissions to achieve full node compromise.

Zohocorp ManageEngine Password Manager Pro and PAM360 are vulnerable to an authenticated SQL injection flaw, which could allow an attacker to execute arbitrary SQL commands.

A cross-site scripting vulnerability in IBM i allows authenticated remote attackers to inject malicious scripts into web pages viewed by other users.

A stored cross-site scripting vulnerability exists in Cal.com Self-Hosted, allowing authenticated users to execute malicious scripts via the analytics tracking ID parameter.

An interpretation conflict and authorization flaw in the @cedar-policy/authorization-for-expressjs package allows authenticated users to bypass intended security controls.

IBM i Access Client Solutions contains a path traversal vulnerability that allows attackers to access restricted directories on the host system.

A stack-based buffer overflow in IBM Informix Dynamic Server allows remote, authenticated attackers to execute arbitrary code via an unchecked SQL interface length field.

IBM i 7 contains a privilege management vulnerability that could allow an authenticated user to gain elevated permissions on the system.

IBM i is susceptible to an OS Command Injection vulnerability, allowing an authenticated user to execute arbitrary commands on the underlying operating system.

IBM i contains an OS Command Injection vulnerability, which permits an authenticated user to execute arbitrary commands at the operating system level.

IBM i is affected by an OS Command Injection vulnerability, which allows an authenticated user to execute arbitrary commands on the host operating system.

IBM i 7 contains an OS command injection vulnerability, allowing an authenticated attacker to execute arbitrary system commands.

IBM i 7 contains a vulnerability involving execution with unnecessary privileges, which may allow an authenticated user to perform actions outside their intended authorization scope.

IBM i 7 contains a vulnerability involving execution with unnecessary privileges, potentially allowing authenticated users to perform unauthorized operations.

A vulnerability in JFrog Artifactory allows low-privileged users to poison cached artifact metadata, potentially causing consumers to retrieve untrusted content.

IBM i 7.3 through 7.6 contains an improper privilege management vulnerability that could allow an authenticated user to gain unauthorized elevated access.

Pingvin Share X contains authentication vulnerabilities involving incorrect implementation and missing critical steps in the authentication algorithm.

IBM i 7.3 through 7.6 is susceptible to OS command injection, which may allow an authenticated attacker to execute arbitrary system commands.

IBM i 7.3 through 7.6 contains an origin validation error that could allow an attacker to bypass security controls via a malicious request.

Semaphore UI contains a privilege management vulnerability that allows authenticated users to perform unauthorized actions.

Progress WhatsUp Gold contains multiple critical vulnerabilities, including missing authentication and server-side request forgery, allowing potential system compromise.

RustFS contains an improper privilege management vulnerability that could allow an authenticated attacker to perform unauthorized actions.

Vulnerability-Lookup is susceptible to an authentication bypass via a capture-replay attack during the account activation and password recovery processes.

The etcd distributed key-value store is vulnerable to a resource exhaustion attack due to improper limitation of resource allocation.

A use-after-free vulnerability in the Linux kernel KVM x86 shadow MMU allows local attackers to potentially trigger a guest-to-host escape and gain root privileges on the host system.

A race condition in the Linux kernel KVM nVMX code during nested virtualization allows a use-after-free scenario when freeing the shadow VMCS, potentially leading to host memory corruption.

A use-after-free vulnerability in the Linux kernel rhashtable implementation allows local attackers to trigger memory corruption or information disclosure by dereferencing stale pointers.

In the Linux kernel, the following vulnerability has been resolved: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes Reject invalid `net.

In the Linux kernel, the following vulnerability has been resolved: 6lowpan: fix NHC entry use-after-free on error path lowpan_nhc_do_uncompression() looks up an NHC descriptor while holding lowpan_nhc_lock.

In the Linux kernel, the following vulnerability has been resolved: iio: event: Fix event FIFO reset race `iio_event_getfd()` creates the event file descriptor with `anon_inode_getfd()`, which allocates a new fd, creates the anonymous file and installs it in the process fd table before returning t.

In the Linux kernel, the following vulnerability has been resolved: iio: adc: ad_sigma_delta: fix CS held asserted and state leaks In ad_sigma_delta_single_conversion(), set_mode(AD_SD_MODE_IDLE) and disable_one() were called from the out: block while keep_cs_asserted was still true.

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async [Why&How] dc_process_dmub_aux_transfer_async() copies payload->length bytes into a 16-byte stack buffer (dpaux.

In the Linux kernel, the following vulnerability has been resolved: crypto: caam - use print_hex_dump_devel to guard key hex dumps Use print_hex_dump_devel() for dumping sensitive key material in *_setkey() to avoid leaking secrets at runtime when CONFIG_DYNAMIC_DEBUG is enabled.