PT-2025-13312 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A memory leak issue has been identified in the Linux kernel, specifically in the kernel/irq/irqdomain.c file. The problem occurs when using the debugfs lookup function without properly...

PT-2025-13313 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A memory leak issue has been identified in the Linux kernel, specifically in the hv balloon component when using the debugfs lookup function. The issue arises because the result of...

In freeradius when an EAP-SIM supplicant sends an unknown SIM option the server will try to look that option up in the internal dictionaries. This lookup will fail but the SIM code will not check for that failure. Instead it will dereference a NULL pointer and cause the server to crash.

...

PT-2023-19585 · Jenkins · Jenkins Kubernetes Credentials Provider Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Kubernetes Credentials Provider Plugin versions 1.208.v128ee9800c04 and earlier Description: The issue allows attackers with Item/Configure permission to access and potentially capture Kubernetes credentials they are not entitled to,...

Important: kernel-livepatch-4.14.294-220.533

Issue Overview: A vulnerability was found in Linux Kernel. It has been declared as problematic. Affected by this vulnerability is the function ipv6renewoptions of the component IPv6 Handler. The manipulation leads to memory leak. The attack can be launched remotely. It is recommended to apply a...

PT-2023-9336 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a race condition in the fastrpc map find function, which can lead to use-after-free. This occurs due to a race window between the point when the mutex is unlock...

AZL-13062 CVE-2022-41860 affecting package freeradius for versions less than 3.2.3-1

In freeradius, when an EAP-SIM supplicant sends an unknown SIM option, the server will try to look that option up in the internal dictionaries. This lookup will fail, but the SIM code will not check for that failure. Instead, it will dereference a NULL pointer, and cause the server to crash...

GSD-2023-1000534 regulator: core: Use different devices for resource allocation and DT lookup

regulator: core: Use different devices for resource allocation and DT lookup This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

CVE-2022-41860

In freeradius, when an EAP-SIM supplicant sends an unknown SIM option, the server will try to look that option up in the internal dictionaries. This lookup will fail, but the SIM code will not check for that failure. Instead, it will dereference a NULL pointer, and cause the server to crash...

CVE-2022-41860

In freeradius, when an EAP-SIM supplicant sends an unknown SIM option, the server will try to look that option up in the internal dictionaries. This lookup will fail, but the SIM code will not check for that failure. Instead, it will dereference a NULL pointer, and cause the server to crash...

Cross-site Scripting (XSS)

djangoucamlookup is vulnerable to Cross-Site Scripting XSS attacks. The invocation of jquery select2 to provide searchable dropdowns does not sanitize data coming from the lookup, allowing an attacker to inject and execute malicious JavaScript through formatResult function of the component Lookup...

Apache Commons Text: Arbitrary Code Execution

Background Apache Commons Text is a library focused on algorithms working on strings. Description Apache Commons Text performs variable interpolation, allowing properties to be dynamically evaluated and expanded. The standard format for interpolation is "$prefix:name", where "prefix" is used to...

django-ucamlookup Cross-site Scripting vulnerability

A vulnerability classified as problematic was found in University of Cambridge django-ucamlookup up to 1.9.1. Affected by this vulnerability is an unknown functionality of the component Lookup Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. Upgrading ...

GHSA-PJX4-3F3P-29V3 django-ucamlookup Cross-site Scripting vulnerability

A vulnerability classified as problematic was found in University of Cambridge django-ucamlookup up to 1.9.1. Affected by this vulnerability is an unknown functionality of the component Lookup Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. Upgrading ...

Cross site scripting

UNSUPPORTED WHEN ASSIGNED A vulnerability classified as problematic was found in University of Cambridge django-ucamlookup up to 1.9.1. Affected by this vulnerability is an unknown functionality of the component Lookup Handler. The manipulation leads to cross site scripting. The attack can be...

django-ucamlookup 跨站脚本漏洞

django-ucamlookup is an open source library from University of Cambridge. It provides useful methods and templates to integrate django applications with the University of Cambridge lookup service. A cross-site scripting vulnerability exists in versions prior to django-ucamlookup 1.9.2, which stem...

PT-2023-10329 · Unknown · Django-Ucamlookup

Name of the Vulnerable Software and Affected Versions: django-ucamlookup versions up to 1.9.1 Description: A vulnerability was found in the Lookup Handler component of django-ucamlookup, leading to cross-site scripting. The attack can be launched remotely. This issue affects products that are no...

PT-2025-37884

Name of the Vulnerable Software and Affected Versions: linux affected versions not specified Description: A memory leak was identified in the Linux kernel related to the vmw balloon module when using the debugfs lookup function. The issue occurs because the result of debugfs lookup requires a cal...

PT-2025-37644

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A memory leak exists when using the debugfs lookup function within the power management PM domains functionality. Failing to call dput on the result of debugfs lookup leads to a memory...

PT-2025-37537

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A memory leak exists in the tty subsystem, specifically within the pcn uart driver, related to the use of the debugfs lookup function. Failing to call dput on the result of debugfs...