ROS-20260203-73-0003

Vulnerability in kernel-lt related to use of incorrectly referenced name. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

The vulnerability of the `ftrace_hash_ipmodify_update()` function in the kernel/trace/ftrace.c module, which supports kernel tracing in Linux operating systems, allows a hacker to cause a service failure.

The vulnerability of the ftracehashipmodifyupdate function in the kernel/trace/ftrace.c module, which supports kernel tracing in Linux operating systems, is related to the use of a name with incorrect references. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2022-50522 mcb: mcb-parse: fix error handing in chameleon_parse_gdd()

In the Linux kernel, the following vulnerability has been resolved: mcb: mcb-parse: fix error handing in chameleonparsegdd If mcbdeviceregister returns error in chameleonparsegdd, the refcount of bus and device name are leaked. Fix this by calling putdevice to give up the reference, so they can b...

MAL-2025-8560 Malicious code in @malware-test-cobby-style-nappe-lassu/test-mlw3-cobby-style-nappe-lassu (npm)

The package @malware-test-cobby-style-nappe-lassu/test-mlw3-cobby-style-nappe-lassu was found to contain malicious code...

Malicious code in @malware-test-leave-verso-bucks-foots/test-mlw3-leave-verso-bucks-foots (npm)

The package @malware-test-leave-verso-bucks-foots/test-mlw3-leave-verso-bucks-foots was found to contain malicious code...

CVE-2021-21635

Jenkins REST List Parameter Plugin 1.3.0 and earlier does not escape a parameter name reference in embedded JavaScript, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Job/Configure permission...

Exploit for Use of Incorrectly-Resolved Name or Reference in Zohocorp Manageengine_Adselfservice_Plus

Exploitation code for CVE-2021-40539...

CVE-2021-21635

Jenkins REST List Parameter Plugin 1.3.0 and earlier does not escape a parameter name reference in embedded JavaScript, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Job/Configure permission...