769 matches found
CVE-2025-27997
Blizzard Battle.net version v2.40.0.15267 is vulnerable to a privilege escalation issue caused by an uncontrolled search path element (CWE-427). An attacker can escalate privileges by placing a crafted shell script or executable into the C:\ProgramData directory. Exploitation of this vulnerabilit...
CVE-2025-46611
Cross Site Scripting vulnerability in ARTEC EMA Mail v6.92 allows an attacker to execute arbitrary code via a crafted script...
UBUNTU-CVE-2024-40446
An issue in forkosh Mime Tex before v.1.77 allows an attacker to execute arbitrary code via a crafted script...
CVE-2024-40446: Improper Control of Generation of Code
An issue in forkosh Mime Tex before v.1.77 allows an attacker to execute arbitrary code via a crafted script...
CVE-2024-40446
An issue in forkosh Mime Tex before v.1.77 allows an attacker to execute arbitrary code via a crafted script...
CVE-2024-22880
Cross Site Scripting vulnerability in Zadarma Zadarma extension v.1.0.11 allows a remote attacker to execute a arbitrary code via a crafted script to the webchat component...
CVE-2024-42733: Improper Control of Generation of Code
An issue in Docmosis Tornado v.2.9.7 and before allows a remote attacker to execute arbitrary code via a crafted script to the UNC path input...
CVE-2024-42733
An issue in Docmosis Tornado v.2.9.7 and before allows a remote attacker to execute arbitrary code via a crafted script to the UNC path input...
Cross-site Scripting
Tsup is vulnerable to DOM Clobbering. The vulnerability is due to DOM Clobbering caused by a crafted script in the import.meta.url to document.currentScript in cjsshims.js components...
tsup DOM Clobbering vulnerability
A DOM Clobbering vulnerability in tsup v8.3.4 allows attackers to execute arbitrary code via a crafted script in the import.meta.url to document.currentScript in cjsshims.js components...
CVE-2024-53384
A DOM Clobbering vulnerability in tsup v8.3.4 allows attackers to execute arbitrary code via a crafted script in the import.meta.url to document.currentScript in cjsshims.js components...
CVE-2024-53384
The tsup (NPM) package version v8.3.4 is vulnerable to a DOM Clobbering vulnerability. The root cause is a lack of measures to protect the website structure, which allows an attacker to execute arbitrary code by utilizing a crafted script targeting import.meta.url to document.currentScript within...
CVE-2025-25973
A stored Cross Site Scripting vulnerability in the "related recommendations" feature in Ppress v.0.0.9 allows a remote attacker to execute arbitrary code via a crafted script to the article.title, article.category, and article.tags parameters...
CVE-2025-25973
A stored Cross Site Scripting vulnerability in the "related recommendations" feature in Ppress v.0.0.9 allows a remote attacker to execute arbitrary code via a crafted script to the article.title, article.category, and article.tags parameters...
CVE-2025-25973
A stored Cross Site Scripting vulnerability in the "related recommendations" feature in Ppress v.0.0.9 allows a remote attacker to execute arbitrary code via a crafted script to the article.title, article.category, and article.tags parameters...
CVE-2025-25973
A stored Cross-Site Scripting (XSS) vulnerability exists in the "related recommendations" feature of the Ppress blogging CMS (version 0.0.9 ). This flaw allows a remote attacker to execute arbitrary code by injecting a crafted script through the article.title, article.category, and article.tags p...
CVE-2024-35102
Insecure Permissions vulnerability in VITEC AvediaServer Model avsrv-m8105 8.6.2-1 allows a remote attacker to escalate privileges via a crafted script...
PT-2025-6411
Name of the Vulnerable Software and Affected Versions Anyscale Inc Ray versions 2.9.3 through 2.40.0 Description The issue allows a remote attacker to execute arbitrary code via a crafted script. Recommendations For versions 2.9.3 through 2.40.0, consider disabling the execution of external scrip...
CVE-2024-57000
CVE-2024-57000 is a duplicate of CVE-2023-48022. The connected records tie CVE-2023-48022 to a Ray remote code execution issue via the agent/job submission endpoint (affecting Ray v2.9.3–2.40.0; exploitation is demonstrated by a Metasploit module), with references from Nessus (Ray Dashboard Job R...