18841 matches found
CVE-2025-21264 Visual Studio Code Security Feature Bypass Vulnerability
...
CVE-2025-21264
Visual Studio Code (VS Code) is affected by CVE-2025-21264, a local vulnerability described as a security feature bypass. The issue permits an unauthorized, local attacker to bypass a security feature due to how VS Code handles files/directories accessible to external parties and trusted domains....
CVE-2024-51446
A vulnerability has been identified in Polarion V2310 All versions, Polarion V2404 All versions V2404.4. The file upload feature of the affected application improperly sanitizes xml files. This could allow an authenticated remote attacker to conduct a stored cross-site scripting attack by uploadi...
CVE-2024-51445
A vulnerability has been identified in Polarion V2310 All versions, Polarion V2404 All versions V2404.4. The affected application contains a XML External Entity Injection XXE vulnerability in the docx import feature. This could allow an authenticated remote attacker to read arbitrary data from th...
CVE-2024-51445
A vulnerability has been identified in Polarion V2310 All versions, Polarion V2404 All versions V2404.4. The affected application contains a XML External Entity Injection XXE vulnerability in the docx import feature. This could allow an authenticated remote attacker to read arbitrary data from th...
kernel: ext4: filesystems without casefold feature cannot be mounted with siphash
A flaw was found in the Linux kernel's ext4 filesystem. This vulnerability occurs when an attempt is made to mount an ext4 filesystem using the DXHASHSIPHASH default hash version on a filesystem that does not have the casefold feature enabled. Under these specific conditions, the mounting process...
Description of the security update for SharePoint Enterprise Server 2016: May 13, 2025 (KB5002722)
Description of the security update for SharePoint Enterprise Server 2016: May 13, 2025 KB5002722 Applies To SharePoint Server 2016 Summary This security update resolves a Microsoft SharePoint Server remote code execution vulnerability and Microsoft SharePoint Server elevation of privilege...
Description of the security update for SharePoint Enterprise Server 2016 Language Pack: May 13, 2025 (KB5002712)
Description of the security update for SharePoint Enterprise Server 2016 Language Pack: May 13, 2025 KB5002712 Applies To SharePoint Server 2016 Summary This security update resolves a Microsoft SharePoint Server elevation of privilege vulnerability. To learn more about the vulnerability, see...
Visual Studio Code Security Feature Bypass Vulnerability
Files or directories accessible to external parties in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...
UrlMon Security Feature Bypass Vulnerability
Acceptance of extraneous untrusted data with trusted data in UrlMon allows an unauthorized attacker to bypass a security feature over a network...
CVE-2025-29842: Acceptance of Extraneous Untrusted Data With Trusted Data
Acceptance of extraneous untrusted data with trusted data in UrlMon allows an unauthorized attacker to bypass a security feature over a network...
PT-2025-20845 · Siemens · Polarion
Name of the Vulnerable Software and Affected Versions: Polarion V2310 All versions Polarion V2404 versions prior to V2404.4 Description: A vulnerability has been identified in the affected application, which contains a XML External Entity Injection XXE vulnerability in the docx import feature. Th...
vscode -- security feature bypass vulnerability
VSCode developers report: A security feature bypass vulnerability exists in VS Code 1.100.0 and earlier versions where a maliciously crafted URL could be considered trusted when it should not have due to how VS Code handled glob patterns in the trusted domains feature. When paired with the fetch...
Machine Learning-Based Detection of DDoS Attacks in VANETs for Emergency Vehicle Communication
Vehicular Ad Hoc Networks VANETs play a key role in Intelligent Transportation Systems ITS, particularly in enabling real-time communication for emergency vehicles. However, Distributed Denial of Service DDoS attacks, which interfere with safety-critical communication channels, can severely impai...
CVE-2025-1079: UNIX Symbolic Link (Symlink) Following
Client RCE on macOS and Linux via improper symbolic link resolution in Google Web Designer's preview feature...
Evaluating Explanation Quality in X-IDS Using Feature Alignment Metrics
Explainable artificial intelligence XAI methods have become increasingly important in the context of explainable intrusion detection systems X-IDSs for improving the interpretability and trustworthiness of X-IDSs. However, existing evaluation approaches for XAI focus on model-specific properties...
Google Web Designer security vulnerabilities
Google Web Designer is a professional-grade HTML5 advertising and web content authoring tool from Google, supporting visual design and code editing. A code execution vulnerability exists in Google Web Designer, which stems from improperly resolved symbolic links in the Preview feature, and can be...
FreeBSD : Mozilla -- insufficient character escaping (a59bd59e-2e85-11f0-a989-b42e991fc52e)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the a59bd59e-2e85-11f0-a989-b42e991fc52e advisory. [email protected] reports: Due to insufficient escaping of special characters in the copy as cURL...
Tired of Google sponsored ads? So are we! That’s why we’re introducing the option to block them on iOS
Sponsored ads on Google search don’t just irritate users—they also provide a dangerous opportunity for cybercriminals to spread malware and scams to their unsuspecting victims. What looks like a harmless search result can be a carefully disguised trap. At Malwarebytes, our researchers have...
Information Disclosure
Flags SDK is vulnerable to information disclosure. The vulnerability is due to a flaw in the flags discovery endpoint that allows attackers with detailed knowledge of the issue to list all feature flags, including names, descriptions, options, and default values...