Lucene search
+L

4373 matches found

AlpineLinux
AlpineLinux
added 2025/04/10 2:15 p.m.9 views

CVE-2025-32743

In ConnMan through 1.44, the lookup string in nsresolv in dnsproxy.c can be NULL or an empty string when the TC Truncated bit is set in a DNS response. This allows attackers to cause a denial of service application crash or possibly execute arbitrary code, because those lookup values lead to...

9CVSS8.2AI score0.00482EPSS
SaveExploits0References2
OSV
OSV
added 2025/04/10 2:15 p.m.12 views

CVE-2025-32743

In ConnMan through 1.44, the lookup string in nsresolv in dnsproxy.c can be NULL or an empty string when the TC Truncated bit is set in a DNS response. This allows attackers to cause a denial of service application crash or possibly execute arbitrary code, because those lookup values lead to...

7.7AI score
SaveExploits0References2
OSV
OSV
added 2025/04/10 2:15 p.m.7 views

UBUNTU-CVE-2025-32743

In ConnMan through 1.44, the lookup string in nsresolv in dnsproxy.c can be NULL or an empty string when the TC Truncated bit is set in a DNS response. This allows attackers to cause a denial of service application crash or possibly execute arbitrary code, because those lookup values lead to...

9CVSS6AI score0.00482EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2025/04/10 5:39 a.m.9 views

CVE-2025-32413

Vulnerability-Lookup before 2.7.1 allows stored XSS via a user bio in website/web/views/user.py...

6.4CVSS5.6AI score0.00233EPSS
SaveExploits0References1
CVE
CVE
added 2025/04/10 12:00 a.m.119 views

CVE-2025-32743

CVE-2025-32743 affects ConnMan up to version 1.44. The vulnerability is in dnsproxy.c: ns_resolv lookup string can be NULL or empty when the DNS response sets the TC (Truncated) bit. This can cause denial of service (application crash) and potentially arbitrary code execution due to incorrect len...

9CVSS9.4AI score0.00482EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:00 a.m.12 views

The vulnerability of the function LookupTable::SetLUT in the DICOM image processing tool Grassroots DiCoM allows a perpetrator to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the function LookupTable::SetLUT in the DICOM image processing tool Grassroots DiCoM is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, an...

7.7CVSS7.5AI score0.01394EPSS
SaveExploits1References7Affected Software3
OSV
OSV
added 2025/04/08 9:15 a.m.8 views

DEBIAN-CVE-2025-22014

In the Linux kernel, the following vulnerability has been resolved: soc: qcom: pdr: Fix the potential deadlock When some client process A call pdraddlookup to add the look up for the service and does schedule locator work, later a process B got a new server packet indicating locator is up and cal...

5.5CVSS5.5AI score0.00156EPSS
SaveExploits0References1
CVE
CVE
added 2025/04/08 8:18 a.m.181 views

CVE-2025-22014

CVE-2025-22014 relates to the Linux kernel, specifically the QCOM SoC PDR path. The issue is a potential deadlock between processes when a client adds a service lookup (pdr_add_lookup) and a server locator update (pdr_locator_new_server), which can cause the response to queue on the same workqueu...

5.5CVSS7.2AI score0.00156EPSS
SaveExploits0References9Affected Software1
OSV
OSV
added 2025/04/08 8:18 a.m.11 views

CVE-2025-22014 soc: qcom: pdr: Fix the potential deadlock

In the Linux kernel, the following vulnerability has been resolved: soc: qcom: pdr: Fix the potential deadlock When some client process A call pdraddlookup to add the look up for the service and does schedule locator work, later a process B got a new server packet indicating locator is up and cal...

5.9AI score
SaveExploits0References12
NVD
NVD
added 2025/04/08 3:15 a.m.10 views

CVE-2025-32413

Vulnerability-Lookup before 2.7.1 allows stored XSS via a user bio in website/web/views/user.py...

6.4CVSS0.00233EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/04/08 12:00 a.m.7 views

PT-2025-15324 · Unknown · Vulnerability-Lookup

Name of the Vulnerable Software and Affected Versions: Vulnerability-Lookup versions prior to 2.7.1 Description: The issue allows stored XSS via a user bio in the website/web/views/user.py file. This can potentially lead to malicious script execution when a user views the affected bio...

6.4CVSS5.2AI score0.00233EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2025/04/08 12:00 a.m.7 views

Vulnerability-Lookup 跨站脚本漏洞

Vulnerability-Lookup is an open source Vulnerability-Lookup platform for managing disclosure of vulnerabilities. A cross-site scripting vulnerability exists in Vulnerability-Lookup versions prior to 2.7.1, which stems from an unneutralized input in a user profile resulting in stored cross-site...

6.4CVSS5.5AI score0.00233EPSS
SaveExploits0References3
OSV
OSV
added 2025/04/08 12:00 a.m.9 views

CVE-2025-32413

Vulnerability-Lookup before 2.7.1 allows stored XSS via a user bio in website/web/views/user.py...

6.4CVSS5.5AI score
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2025/04/01 12:00 a.m.11 views

The vulnerability of the ovl_lookup() function in the fs/overlayfs/namei.c module of the Linux file system allows a hacker to gain access to protected information.

The vulnerability of the ovllookup function in the fs/overlayfs/namei.c module of the Linux file system supports the kernel’s file system support. This vulnerability is related to improper memory release before deleting the last reference memory leak. Exploiting this vulnerability can allow an...

5.5CVSS6.4AI score0.00249EPSS
SaveExploits0References14Affected Software4
OSV
OSV
added 2025/03/31 2:15 p.m.7 views

CVE-2023-0881

Running DDoS on tcp port 22 will trigger a kernel crash. This issue is introduced by the backport of a commit regarding nftlookup without the subsequent fixes that were introduced after this commit. The resolution of this CVE introduces those commits to the linux-bluefield package...

7.5CVSS5.8AI score0.00409EPSS
SaveExploits1References1
OSV
OSV
added 2025/03/31 2:15 p.m.50 views

UBUNTU-CVE-2023-0881

Running DDoS on tcp port 22 will trigger a kernel crash. This issue is introduced by the backport of a commit regarding nftlookup without the subsequent fixes that were introduced after this commit. The resolution of this CVE introduces those commits to the linux-bluefield package...

7.5CVSS5.8AI score0.00409EPSS
SaveExploits1References3
SUSE CVE
SUSE CVE
added 2025/03/28 3:38 a.m.4 views

SUSE CVE-2023-52936

In the Linux kernel, the following vulnerability has been resolved: kernel/irq/irqdomain.c: fix memory leak with using debugfslookup When calling debugfslookup the result must have dput called on it, otherwise the memory will leak over time. To make things simpler, just call debugfslookupandremov...

5.5CVSS8AI score0.00245EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
added 2025/03/28 3:38 a.m.6 views

SUSE CVE-2023-52937

In the Linux kernel, the following vulnerability has been resolved: HV: hvballoon: fix memory leak with using debugfslookup When calling debugfslookup the result must have dput called on it, otherwise the memory will leak over time. To make things simpler, just call debugfslookupandremove instead...

5.5CVSS6.8AI score0.00205EPSS
SaveExploits0References5
OSV
OSV
added 2025/03/27 5:15 p.m.1 views

DEBIAN-CVE-2023-52936

In the Linux kernel, the following vulnerability has been resolved: kernel/irq/irqdomain.c: fix memory leak with using debugfslookup When calling debugfslookup the result must have dput called on it, otherwise the memory will leak over time. To make things simpler, just call debugfslookupandremov...

5.5CVSS5.1AI score0.00245EPSS
SaveExploits0References1
OSV
OSV
added 2025/03/27 5:15 p.m.2 views

DEBIAN-CVE-2023-52937

In the Linux kernel, the following vulnerability has been resolved: HV: hvballoon: fix memory leak with using debugfslookup When calling debugfslookup the result must have dput called on it, otherwise the memory will leak over time. To make things simpler, just call debugfslookupandremove instead...

5.5CVSS5.4AI score0.00205EPSS
SaveExploits0References1
Rows per page
Query Builder