CVE-2025-20233: Incorrect Permission Assignment for Critical Resource

In the Splunk App for Lookup File Editing versions below 4.0.5, a script in the app used the chmod and makedirs Python functions in a way that resulted in overly broad read and execute permissions. This could lead to improper access control for a low-privileged user...

PT-2025-13017

Name of the Vulnerable Software and Affected Versions Splunk App for Lookup File Editing versions prior to 4.0.5 Description The issue is related to improper access control due to overly broad read and execute permissions. A script in the app used the chmod and makedirs Python functions in a way...

CVE-2024-53679

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Apache VCL in the User Lookup form. A user with sufficient rights to be able to view this part of the site can craft a URL or be tricked in to clicking a URL that will give a specified user elevate...

CVE-2024-53679 Apache VCL: XSS vulnerability in User Lookup impacting user privileges

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Apache VCL in the User Lookup form. A user with sufficient rights to be able to view this part of the site can craft a URL or be tricked in to clicking a URL that will give a specified user elevate...

CVE-2024-53679

CVE-2024-53679 is an Apache VCL XSS in the User Lookup form. The issue is caused by improper neutralization of input during web page generation, allowing a user with sufficient rights to craft or click a URL that can elevate privileges for a specified user. Affected software: Apache VCL up to ver...

CVE-2024-53679 Apache VCL: XSS vulnerability in User Lookup impacting user privileges

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Apache VCL in the User Lookup form. A user with sufficient rights to be able to view this part of the site can craft a URL or be tricked in to clicking a URL that will give a specified user elevate...

CVE-2024-53679

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Apache VCL in the User Lookup form. A user with sufficient rights to be able to view this part of the site can craft a URL or be tricked in to clicking a URL that will give a specified user elevate...

CVE-2024-53679: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Apache VCL in the User Lookup form. A user with sufficient rights to be able to view this part of the site can craft a URL or be tricked in to clicking a URL that will give a specified user elevate...

PT-2025-12677

Name of the Vulnerable Software and Affected Versions Apache VCL versions through 2.5.1 Description The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting', in the User Lookup form of Apache VCL. A user with sufficient rights can...

Fedora 40 : python-jinja2 (2025-8b6aa24ab4)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-8b6aa24ab4 advisory. Version 3.1.6 Released 2025-03-05 The |attr filter does not bypass the environment's attribute lookup, allowing the sandbox to apply its checks. Tenable has...

PT-2025-16580

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue concerns a vulnerability in the Linux kernel's netfilter socket implementation. Specifically, the IPv6 counterpart of the nf sk lookup slow v4 function, nf sk lookup slow v6,...

CVE-2024-58087

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix racy issue from session lookup and expire Increment the session reference count within the lock for lookup to avoid racy issue with session expire...

SUSE CVE-2024-58087

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix racy issue from session lookup and expire Increment the session reference count within the lock for lookup to avoid racy issue with session expire...

CVE-2025-21846

CVE-2025-21846 (Linux kernel) : The acct(2) path could trigger a NULL dereference when writing to a file that triggers an internal lookup (e.g., /sys/power/resume) after the task has exited. The fix reorganizes the code so the final write executes from a workqueue while preserving the caller’s cr...

DEBIAN-CVE-2024-58087

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix racy issue from session lookup and expire Increment the session reference count within the lock for lookup to avoid racy issue with session expire...

UBUNTU-CVE-2024-58087

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix racy issue from session lookup and expire Increment the session reference count within the lock for lookup to avoid racy issue with session expire...

CVE-2024-58087 ksmbd: fix racy issue from session lookup and expire

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix racy issue from session lookup and expire Increment the session reference count within the lock for lookup to avoid racy issue with session expire...

CVE-2024-58087 ksmbd: fix racy issue from session lookup and expire

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix racy issue from session lookup and expire Increment the session reference count within the lock for lookup to avoid racy issue with session expire...

CVE-2024-58087

CVE-2024-58087 affects ksmbd in the Linux kernel and was resolved by incrementing the session reference count within the lookup lock to prevent a race with session expire. The vulnerability pertains to a racy session lookup/expire scenario in ksmbd, with impact described as high for confidentiali...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel suffers from a Competitive Condition Problem vulnerability that stems from a competitive condition problem during session lookup and expiration. An attacker can...