8168 matches found
DEBIAN-CVE-2025-27220
In the CGI gem before 0.4.2 for Ruby, a Regular Expression Denial of Service ReDoS vulnerability exists in the UtilescapeElement method...
Intel Thread Director Visualizer Uncontrolled Element
The vulnerability of the Intel Thread Director Visualizer, a tool for visualizing CPU loading, is related to an uncontrolled element in the search process. Exploiting this vulnerability could allow attackers to increase their privileges...
Regular Expression Denial of Service (ReDoS)
Overview cgi is a Support for the Common Gateway Interface protocol. Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS via the UtilescapeElement method. An attacker can cause high CPU consumption by providing malicious input. Details Denial of Service...
CVE-2024-53387
A DOM Clobbering vulnerability in umeditor v1.2.3 allows attackers to execute arbitrary code via supplying a crafted HTML element...
CVE-2024-53027
Transient DOS may occur while processing the country IE...
CVE-2024-53027
CVE-2024-53027 is a transient DoS vulnerability triggered while processing a malformed Country Information Element in Qualcomm WLAN firmware and Bluetooth stacks. Exploitation requires proximity (remote over Wi‑Fi/Bluetooth) and can crash the chipset firmware, potentially disrupting connectivity ...
CVE-2024-53388
A DOM Clobbering vulnerability in mavo v0.3.2 allows attackers to execute arbitrary code via supplying a crafted HTML element...
CVE-2024-53387
A DOM Clobbering vulnerability in umeditor v1.2.3 allows attackers to execute arbitrary code via supplying a crafted HTML element...
PT-2025-9516
Name of the Vulnerable Software and Affected Versions mavo version 0.3.2 Description A DOM Clobbering issue allows attackers to execute arbitrary code by supplying a crafted HTML element. Recommendations For mavo version 0.3.2, at the moment, there is no information about a newer version that...
CVE-2024-53387
A DOM Clobbering vulnerability in umeditor v1.2.3 allows attackers to execute arbitrary code via supplying a crafted HTML element...
CVE-2024-53387: Improper Neutralization of Input During Web Page Generation
A DOM Clobbering vulnerability in umeditor v1.2.3 allows attackers to execute arbitrary code via supplying a crafted HTML element...
CVE-2024-53387
A DOM Clobbering vulnerability exists in umeditor v1.2.3 , a rich text editor developed by the Baidu FEX team. This flaw allows an attacker to execute arbitrary code by supplying a crafted HTML element to the application. The vulnerability is categorized as Improper Neutralization of Input During...
PT-2025-9307
Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description A transient Denial of Service DOS may occur while processing the country Information Element IE. Recommendations At the moment, there is no information about a newer version that contains a fi...
CVE-2024-53388
A DOM Clobbering vulnerability in mavo v0.3.2 allows attackers to execute arbitrary code via supplying a crafted HTML element...
Qualcomm Chipsets 安全漏洞
Qualcomm Chipsets are a family of chipsets from Qualcomm, Inc. A security vulnerability exists in Qualcomm Chipsets that stems from a transient denial of service when processing country IE...
Hitachi Vantara Pentaho BA Server Special Element Injection Vulnerability
Hitachi Vantara Pentaho BA Server contains a special element injection vulnerability that allows an attacker to inject Spring templates into properties files, allowing for arbitrary command execution...
CVE-2024-53388
The mavo v0.3.2 web application platform is vulnerable to DOM Clobbering due to improper handling of HTML elements and a lack of measures to protect the website structure. A remote attacker can exploit this by supplying a crafted HTML element to inject malicious code and execute arbitrary code or...
CVE-2024-53388
A DOM Clobbering vulnerability in mavo v0.3.2 allows attackers to execute arbitrary code via supplying a crafted HTML element...
VulnCheck KEV: CVE-2022-43769
Hitachi Vantara Pentaho BA Server contains a special element injection vulnerability that allows an attacker to inject Spring templates into properties files, allowing for arbitrary command execution...