Apache OFBiz Template Code Execution

The vulnerability of the Apache OFBiz resource planning software lies in the improper elimination of certain elements used in the template. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Microsoft Visual Studio Privilege Escalation

The vulnerability of the Microsoft Visual Studio software development tool is related to an uncontrollable element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2025-25003: Uncontrolled Search Path Element

Uncontrolled search path element in Visual Studio allows an authorized attacker to elevate privileges locally...

CVE-2025-24998: Uncontrolled Search Path Element

Uncontrolled search path element in Visual Studio allows an authorized attacker to elevate privileges locally...

canvg 安全漏洞

canvg is a JavaScript SVG parser and renderer on Canvas from the canvg open source. A security vulnerability exists in canvg version v.4.0.2, which stems from a constructor of the StyleElement class that could lead to the execution of arbitrary code...

OESA-2025-1244 ruby security update

Ruby is a fast and easy interpreted scripting language for object-oriented programming. It has many functions for processing text Files and perform system management tasks such as Perl. Security Fixes: In the CGI gem before 0.4.2 for Ruby, the CGI::Cookie.parse method in the CGI library contains ...

CVE-2024-10930

An Uncontrolled Search Path Element vulnerability exists which could allow a malicious actor to perform DLL hijacking and execute arbitrary code with escalated privileges...

UBUNTU-CVE-2025-21825

In the Linux kernel, the following vulnerability has been resolved: bpf: Cancel the running bpftimer through kworker for PREEMPTRT During the update procedure, when overwrite element in a pre-allocated htab, the freeing of oldelement is protected by the bucket lock. The reason why the bucket lock...

CVE-2024-53027

Transient DOS may occur while processing the country IE...

CVE-2024-53388

A DOM Clobbering vulnerability in mavo v0.3.2 allows attackers to execute arbitrary code via supplying a crafted HTML element...

Intel Advisor oneAPI Base Toolkit Privilege Escalation

The vulnerability of the design and analysis tools for developing efficient Intel Advisor code, as well as the set of development tools Intel oneAPI Base Toolkit, is related to an uncontrollable element in the search process. Exploiting this vulnerability could allow attackers to enhance their...

DEBIAN-CVE-2025-27220

In the CGI gem before 0.4.2 for Ruby, a Regular Expression Denial of Service ReDoS vulnerability exists in the UtilescapeElement method...

Intel Thread Director Visualizer Uncontrolled Element

The vulnerability of the Intel Thread Director Visualizer, a tool for visualizing CPU loading, is related to an uncontrolled element in the search process. Exploiting this vulnerability could allow attackers to increase their privileges...

Regular Expression Denial of Service (ReDoS)

Overview cgi is a Support for the Common Gateway Interface protocol. Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS via the UtilescapeElement method. An attacker can cause high CPU consumption by providing malicious input. Details Denial of Service...

CVE-2024-53387

A DOM Clobbering vulnerability in umeditor v1.2.3 allows attackers to execute arbitrary code via supplying a crafted HTML element...

CVE-2024-53027

Transient DOS may occur while processing the country IE...

CVE-2024-53027

CVE-2024-53027 is a transient DoS vulnerability triggered while processing a malformed Country Information Element in Qualcomm WLAN firmware and Bluetooth stacks. Exploitation requires proximity (remote over Wi‑Fi/Bluetooth) and can crash the chipset firmware, potentially disrupting connectivity ...

PT-2025-9516

Name of the Vulnerable Software and Affected Versions mavo version 0.3.2 Description A DOM Clobbering issue allows attackers to execute arbitrary code by supplying a crafted HTML element. Recommendations For mavo version 0.3.2, at the moment, there is no information about a newer version that...

CVE-2024-53387

A DOM Clobbering vulnerability in umeditor v1.2.3 allows attackers to execute arbitrary code via supplying a crafted HTML element...

CVE-2024-53387: Improper Neutralization of Input During Web Page Generation

A DOM Clobbering vulnerability in umeditor v1.2.3 allows attackers to execute arbitrary code via supplying a crafted HTML element...