Roman

An out-of-bounds access issue exists in the AMD display driver within the Linux kernel. The `eng id` variable is used as an index for the `stream enc regs[]` array, which contains only five entries. If `eng id` is negative or equal to 5 (ENGINE ID DIGF), the system may access memory beyond the array boundaries. This occurs within the `dcn35 stream encoder create()` function.

CVAT is an interactive video and image annotation tool for computer vision. An attacker with an account on a CVAT instance can retrieve the contents of any file system directory accessible to the CVAT server. The exposed information includes the names of contained files and subdirectories, but not the file contents themselves.

An issue in the Blurams Lumi Security Camera allows attackers to execute arbitrary code.

An issue in the Blurams Lumi Security Camera allows a physically proximate attacker to execute arbitrary code.

Name of the Vulnerable Software and Affected Versions: Meross MSG100 devices versions prior to 3.2.3 Description: The issue allows an attacker to replay the same data or similar data. For example, an attacker who intercepts a Close message can transmit an acceptable Open message. Recommendations: For versions prior to 3.2.3, update to version 3.2.3 or later to resolve the issue.

The web-server in the system is configured with the option "DocumentRoot /etc", allowing an attacker with network access to download any files from the "/etc" folder without authentication. This issue can be exploited without the need for path traversal sequences, enabling unauthenticated remote attackers to gain access to sensitive information.

A predictable device ID in the firmware allows unauthenticated remote attackers to connect to the device.

The issue allows local users to potentially gain sensitive information from web logs or browser history when a user is prompted to log in while attempting to view a chart, as the password is displayed in the URL.