CVE-2025-27606

Element Android is an Android Matrix Client provided by Element. Element Android up to version 1.6.32 can, under certain circumstances, fail to logout the user if they input the wrong PIN more than the configured amount of times. An attacker with physical access to a device can exploit this to...

CVE-2025-27606 Element Android PIN autologout bypass

Element Android is an Android Matrix Client provided by Element. Element Android up to version 1.6.32 can, under certain circumstances, fail to logout the user if they input the wrong PIN more than the configured amount of times. An attacker with physical access to a device can exploit this to...

OESA-2025-1262 ruby security update

Ruby is a fast and easy interpreted scripting language for object-oriented programming. It has many functions for processing text Files and perform system management tasks such as Perl. Security Fixes: In the CGI gem before 0.4.2 for Ruby, the CGI::Cookie.parse method in the CGI library contains ...

OESA-2025-1264 ruby security update

Ruby is a fast and easy interpreted scripting language for object-oriented programming. It has many functions for processing text Files and perform system management tasks such as Perl. Security Fixes: In the CGI gem before 0.4.2 for Ruby, the CGI::Cookie.parse method in the CGI library contains ...

PT-2025-11282

Name of the Vulnerable Software and Affected Versions: Element Android versions 1.6.32 and earlier Description: The issue occurs when the user inputs the wrong PIN more than the configured amount of times, causing the application to fail to logout the user under certain circumstances. An attacker...

Element Android 安全漏洞

Element Android is an Android Matrix client for the open source Element. A security vulnerability exists in Element Android version 1.6.32 and earlier, which stems from a failure to logout a user when entering an incorrect PIN more than a configured number of times, which could lead to an attacke...

CVE-2025-27606: Exposure of Data Element to Wrong Session

Element Android is an Android Matrix Client provided by Element. Element Android up to version 1.6.32 can, under certain circumstances, fail to logout the user if they input the wrong PIN more than the configured amount of times. An attacker with physical access to a device can exploit this to...

bpf, sockmap: Fix race between element replace and close()

...

Apache OFBiz Template Code Execution

The vulnerability of the Apache OFBiz resource planning software lies in the improper elimination of certain elements used in the template. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Microsoft Visual Studio Privilege Escalation

The vulnerability of the Microsoft Visual Studio software development tool is related to an uncontrollable element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges...

Microsoft Visual Studio Privilege Escalation

The vulnerability of the Microsoft Visual Studio software development tool is related to an uncontrollable element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2025-25003: Uncontrolled Search Path Element

Uncontrolled search path element in Visual Studio allows an authorized attacker to elevate privileges locally...

CVE-2025-24998: Uncontrolled Search Path Element

Uncontrolled search path element in Visual Studio allows an authorized attacker to elevate privileges locally...

canvg 安全漏洞

canvg is a JavaScript SVG parser and renderer on Canvas from the canvg open source. A security vulnerability exists in canvg version v.4.0.2, which stems from a constructor of the StyleElement class that could lead to the execution of arbitrary code...

OESA-2025-1244 ruby security update

Ruby is a fast and easy interpreted scripting language for object-oriented programming. It has many functions for processing text Files and perform system management tasks such as Perl. Security Fixes: In the CGI gem before 0.4.2 for Ruby, the CGI::Cookie.parse method in the CGI library contains ...

CVE-2024-10930

An Uncontrolled Search Path Element vulnerability exists which could allow a malicious actor to perform DLL hijacking and execute arbitrary code with escalated privileges...

UBUNTU-CVE-2025-21825

In the Linux kernel, the following vulnerability has been resolved: bpf: Cancel the running bpftimer through kworker for PREEMPTRT During the update procedure, when overwrite element in a pre-allocated htab, the freeing of oldelement is protected by the bucket lock. The reason why the bucket lock...

CVE-2024-53027

Transient DOS may occur while processing the country IE...

CVE-2024-53388

A DOM Clobbering vulnerability in mavo v0.3.2 allows attackers to execute arbitrary code via supplying a crafted HTML element...

Intel Advisor oneAPI Base Toolkit Privilege Escalation

The vulnerability of the design and analysis tools for developing efficient Intel Advisor code, as well as the set of development tools Intel oneAPI Base Toolkit, is related to an uncontrollable element in the search process. Exploiting this vulnerability could allow attackers to enhance their...