CVE-2025-27791

Collabora Online is a collaborative online office suite based on LibreOffice technology. In versions prior to 24.04.12.4, 23.05.19, and 22.05.25, there is a path traversal flaw in handling the CheckFileInfo BaseFileName field returned from WOPI servers. This allows for a file to be written anywhe...

CVE-2025-32743

In ConnMan through 1.44, the lookup string in nsresolv in dnsproxy.c can be NULL or an empty string when the TC Truncated bit is set in a DNS response. This allows attackers to cause a denial of service application crash or possibly execute arbitrary code, because those lookup values lead to...

PT-2025-18470

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved. The issue is related to the net: mctp module, where the bind lookup runs under RCU Read-Copy Update. To prevent a socket from being...

CVE-2025-32743

In ConnMan through 1.44, the lookup string in nsresolv in dnsproxy.c can be NULL or an empty string when the TC Truncated bit is set in a DNS response. This allows attackers to cause a denial of service application crash or possibly execute arbitrary code, because those lookup values lead to...

CVE-2025-32743

In ConnMan through 1.44, the lookup string in nsresolv in dnsproxy.c can be NULL or an empty string when the TC Truncated bit is set in a DNS response. This allows attackers to cause a denial of service application crash or possibly execute arbitrary code, because those lookup values lead to...

UBUNTU-CVE-2025-32743

In ConnMan through 1.44, the lookup string in nsresolv in dnsproxy.c can be NULL or an empty string when the TC Truncated bit is set in a DNS response. This allows attackers to cause a denial of service application crash or possibly execute arbitrary code, because those lookup values lead to...

CVE-2025-32413

Vulnerability-Lookup before 2.7.1 allows stored XSS via a user bio in website/web/views/user.py...

CVE-2025-32743

CVE-2025-32743 affects ConnMan up to version 1.44. The vulnerability is in dnsproxy.c: ns_resolv lookup string can be NULL or empty when the DNS response sets the TC (Truncated) bit. This can cause denial of service (application crash) and potentially arbitrary code execution due to incorrect len...

The vulnerability of the function LookupTable::SetLUT in the DICOM image processing tool Grassroots DiCoM allows a perpetrator to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the function LookupTable::SetLUT in the DICOM image processing tool Grassroots DiCoM is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, an...

DEBIAN-CVE-2025-22014

In the Linux kernel, the following vulnerability has been resolved: soc: qcom: pdr: Fix the potential deadlock When some client process A call pdraddlookup to add the look up for the service and does schedule locator work, later a process B got a new server packet indicating locator is up and cal...

CVE-2025-22014

CVE-2025-22014 relates to the Linux kernel, specifically the QCOM SoC PDR path. The issue is a potential deadlock between processes when a client adds a service lookup (pdr_add_lookup) and a server locator update (pdr_locator_new_server), which can cause the response to queue on the same workqueu...

CVE-2025-22014 soc: qcom: pdr: Fix the potential deadlock

In the Linux kernel, the following vulnerability has been resolved: soc: qcom: pdr: Fix the potential deadlock When some client process A call pdraddlookup to add the look up for the service and does schedule locator work, later a process B got a new server packet indicating locator is up and cal...

CVE-2025-32413

Vulnerability-Lookup before 2.7.1 allows stored XSS via a user bio in website/web/views/user.py...

CVE-2025-32413

Vulnerability-Lookup before 2.7.1 allows stored XSS via a user bio in website/web/views/user.py...

PT-2025-15402

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A potential deadlock issue has been resolved in the Linux kernel. The problem occurs when a client process calls pdr add lookup to add a lookup for a service and schedules locator work...

CVE-2025-32413: Improper Neutralization of Input During Web Page Generation

Vulnerability-Lookup before 2.7.1 allows stored XSS via a user bio in website/web/views/user.py...

PT-2025-15324 · Unknown · Vulnerability-Lookup

Name of the Vulnerable Software and Affected Versions: Vulnerability-Lookup versions prior to 2.7.1 Description: The issue allows stored XSS via a user bio in the website/web/views/user.py file. This can potentially lead to malicious script execution when a user views the affected bio...

Vulnerability-Lookup 跨站脚本漏洞

Vulnerability-Lookup is an open source Vulnerability-Lookup platform for managing disclosure of vulnerabilities. A cross-site scripting vulnerability exists in Vulnerability-Lookup versions prior to 2.7.1, which stems from an unneutralized input in a user profile resulting in stored cross-site...

CVE-2025-32413

Vulnerability-Lookup before 2.7.1 allows stored XSS via a user bio in website/web/views/user.py...

javaparser:parseFuzzer: Security exception in com.github.javaparser.GeneratedJavaParser.Expression

Detailed Report: https://oss-fuzz.com/testcase?key=4956486952615936 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...