Draft in the CWE catalog · 4 CVEs mapped
The code uses a function that has inconsistent implementations across operating systems and versions.
The Ingenic T41, and probably also T32, T40, and A1 SoC boot ROMs parse and execute an attacker-controlled init table from the SPL header before checking the secure boot state and before invoking signature verification. The init table parser supports full-address 32-bit write operations, allowing modification of SRAM-resident secure boot state prior to the verification decision. An attacker with physical write access to boot media can inject an init-table entry that disables the secure boot check, causing the ROM to accept unsigned or modified first-stage boot code. This has been hardware-validated on a secureboot-enabled T41 device; ROM analysis confirms closely related behavior on T32, T40, and A1.
Cacti is an open source performance and fault management framework. In versions 1.2.30 and below, the locale-dependent decimal formatting in rrdtool_function_update() can corrupt RRDtool metric values. The rrdtool_function_update() function checks metric values with is_numeric() and concatenates them into the RRDtool update command via PHP string interpolation. PHP's string cast of floats is locale-sensitive: if LC_NUMERIC uses comma as decimal separator (e.g., de_DE), a value of 1.5 becomes "1,5". RRDtool expects . as decimal separator, causing metric data to shift into wrong columns or be silently dropped. No setlocale() reset is present in the update path. This causes a data integrity issue, but is not remotely exploitable; it requires server locale misconfiguration. The issue has been fixed in version 1.2.31.
🚨 A single malicious HTML file can turn a smooth user experience into a phishing nightmare! Users of Horilla (prior to version 1.5.0) are at risk as attackers can easily impersonate a login page and steal credentials. 🔥 Think of it like a crafty barista slipping a fake menu into a café — customers are blissfully unaware that their orders will be taken by a fraudster. By masquerading as something familiar, the attacker can capture sensitive information without raising any alarms. If exploited, an attacker could create a deceptive login screen that prompts users to re-authenticate, leading to stolen credentials and account takeovers. This could result in unauthorized access to sensitive HR data and catastrophic consequences for both users and the organization.