CVE-2025-4272

CVE-2025-4272 affects Mechrevo Control Console 1.0.2.70; vulnerable component is the library csCAPI.dll under GCUService. Reported issue: uncontrolled search path leading to local exploitation. Documents consistently describe local attack requirements with high impact per CVSS vectors (local acce...

Security update for libva

This update for libva fixes the following issues: Update to libva version 2.20.0, which includes security fix for: uncontrolled search path may allow an authenticated user to escalate privilege via local access CVE-2023-39929, bsc1224413, jscPED-11066 This includes latest version of one of the...

CVE-2025-4259

A vulnerability has been found in newbee-mall 1.0 and classified as critical. Affected by this vulnerability is the function Upload of the file ltd/newbee/mall/controller/common/UploadController.java. The manipulation of the argument File leads to unrestricted upload. The attack can be launched...

The vulnerability of the multimedia platform GPAC, related to uncontrolled resource consumption, allows a violator to trigger a service failure.

The vulnerability of the multimedia platform GPAC is related to an uncontrolled consumption of resources. Exploiting this vulnerability could allow a hacker to cause a service failure...

Mechrevo Control Console 代码问题漏洞

Mechrevo Control Console is a computer console software from the Chinese company Mechrevo. A code issue vulnerability exists in Mechrevo Control Console version 1.0.2.70, which stems from an uncontrolled search path vulnerability in the library file csCAPI.dll...

BIT-ELASTICSEARCH-2024-52979 Elasticsearch Uncontrolled Resource Consumption vulnerability

Uncontrolled Resource Consumption in Elasticsearch while evaluating specifically crafted search templates with Mustache functions can lead to Denial of Service by causing the Elasticsearch node to crash...

Security Bulletin: IBM Watson Speech Services Cartridge v4.8.8 is vulnerable to an uncontrolled resource consumption in Apache Commons IO [CVE-2024-47554]

Summary IBM Watson Speech Services Cartridge is vulnerable to an uncontrolled resource consumption in Apache Commons IO, due to a flaw in the org.apache.commons.io.input.XmlStreamReader class that may allow maliciously crafted input to excessively consume CPU resources while processing...

CVE-2025-23177

CWE-427: Uncontrolled Search Path Element...

CVE-2024-52979 Elasticsearch Uncontrolled Resource Consumption vulnerability

Uncontrolled Resource Consumption in Elasticsearch while evaluating specifically crafted search templates with Mustache functions can lead to Denial of Service by causing the Elasticsearch node to crash...

CVE-2024-52979

CVE-2024-52979 : Uncontrolled Resource Consumption in Elasticsearch occurs when evaluating crafted Mustache-based search templates, potentially causing a Denial of Service by crashing the Elasticsearch node. The provided documents identify the affected software (Elasticsearch) and the underlying ...

CVE-2025-4001

A vulnerability has been found in scipopt scip up to 9.2.1 and classified as problematic. Affected by this vulnerability is the function main of the file examples/LOP/src/genRandomLOPInstance.c of the component File Descriptor Handler. The manipulation of the argument File leads to uncontrolled...

CVE-2025-23177

CWE-427: Uncontrolled Search Path Element...

CVE-2025-23177 Ribbon Communications - CWE-427: Uncontrolled Search Path Element

CWE-427: Uncontrolled Search Path Element...

CVE-2025-23177 Ribbon Communications - CWE-427: Uncontrolled Search Path Element

CWE-427: Uncontrolled Search Path Element...

Ribbon Communications Apollo 9608 代码问题漏洞

Ribbon Communications Apollo 9608 is a Session Border Controller SBC from Ribbon Communications, Inc. that is used to protect and manage network traffic for real-time communications such as VoIP. A code issue vulnerability exists in Ribbon Communications Apollo 9608 version v9.6R3, which stems fr...

Amazon Linux 2 : runc (ALASNITRO-ENCLAVES-2025-055)

The version of runc installed on the remote host is prior to 1.1.3-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2NITRO-ENCLAVES-2025-055 advisory. Acceptance of some invalid Transfer-Encoding headers in the HTTP/1 client in net/http before Go 1.17.12 and Go...

CVE-2025-4001

A vulnerability has been found in scipopt scip up to 9.2.1 and classified as problematic. Affected by this vulnerability is the function main of the file examples/LOP/src/genRandomLOPInstance.c of the component File Descriptor Handler. The manipulation of the argument File leads to uncontrolled...

PT-2025-18181 · Ribbon Communications · Apollo 9608

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue is related to an uncontrolled search path element, which can lead to security problems. Recommendations: At the moment, there is no information about a newer version that contains ...

ROS-20250424-04

The GPAC multimedia platform vulnerability involves uncontrolled resource consumption. Exploitation The vulnerability could allow an attacker to cause a denial of service A vulnerability in a function in gfm2tsprocesspmt of the GPAC multimedia platform is related to buffer copying without checkin...

Stack Overflow

Helm is vulnerable to Stack Overflow. The vulnerability is due to uncontrolled recursion due to deeply nested $ref chains in JSON Schema files within charts, which can exceed the stack size limit during parsing...