221 matches found
CVE-2025-54514: Improper Isolation of Shared Resources on System-on-a-Chip (SoC)
Improper isolation of shared resources on a system on a chip by a malicious local attacker with high privileges could potentially lead to a partial loss of integrity...
Improper Isolation or Compartmentalization
Overview mcp-run-python is a Model Context Protocol server to run Python code in a sandbox. Affected versions of this package are vulnerable to Improper Isolation or Compartmentalization via the runPython or runPythonAsync functions. An attacker can gain unauthorized access to and manipulate the...
CVE-2026-25905: Improper Isolation or Compartmentalization
The Python code being run by 'runPython' or 'runPythonAsync' is not isolated from the rest of the JS code, allowing any Python code to use the Pyodide APIs to modify the JS environment. This may result in an attacker hijacking the MCP server - for malicious purposes including MCP tool shadowing...
CVE-2025-53710: Improper Isolation or Compartmentalization
Due to a product misconfiguration in certain deployment types, it was possible from different pods in the same namespace to communicate with each other. This issue resulted in bypass of access control due to the presence of a vulnerable endpoint in Foundry Container Service that executed...
TencentOS Server 3: microcode_ctl (TSSA-2022:0254)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2022:0254 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...
CVE-2025-46215
CVE-2025-46215 describes an improper isolation/compartmentalization vulnerability (CWE-653) in Fortinet FortiSandbox products that may allow an unauthenticated attacker to bypass the sandboxing scan by submitting a crafted file. Affected are FortiSandbox versions 5.0.0–5.0.1, 4.4.0–4.4.7, 4.2 (al...
EUVD-2025-198010
An Improper Isolation or Compartmentalization vulnerability CWE-653 in Fortinet FortiSandbox 5.0.0 through 5.0.1, FortiSandbox 4.4.0 through 4.4.7, FortiSandbox 4.2 all versions, FortiSandbox 4.0 all versions may allow an unauthenticated attacker to evade the sandboxing scan via a crafted file...
CVE-2025-46215
An Improper Isolation or Compartmentalization vulnerability CWE-653 in Fortinet FortiSandbox 5.0.0 through 5.0.1, FortiSandbox 4.4.0 through 4.4.7, FortiSandbox 4.2 all versions, FortiSandbox 4.0 all versions may allow an unauthenticated attacker to evade the sandboxing scan via a crafted file...
File scan result bypass
...
Fortinet FortiSandbox security vulnerability
Fortinet FortiSandbox is an APT Advanced Persistent Threat protection appliance from Fortinet. The appliance offers dual sandbox technology, dynamic threat intelligence system, real-time control panel and reporting. A security vulnerability exists in Fortinet FortiSandbox that stems from improper...
CVE-2025-46215: Improper Isolation or Compartmentalization
An Improper Isolation or Compartmentalization vulnerability CWE-653 in Fortinet FortiSandbox 5.0.0 through 5.0.1, FortiSandbox 4.4.0 through 4.4.7, FortiSandbox 4.2 all versions, FortiSandbox 4.0 all versions may allow an unauthenticated attacker to evade the sandboxing scan via a crafted file...
CVE-2025-3717: Improper Isolation or Compartmentalization
When using the Grafana Snowflake Datasource Plugin, if Oauth passthrough is enabled on the datasource, and multiple users are using the same datasource at the same time on a single Grafana instance, it could result in the wrong user identifier being used, and information for which the viewer is...
CVE-2025-41116: Improper Isolation or Compartmentalization
When using the Grafana Databricks Datasource Plugin, if Oauth passthrough is enabled on the datasource, and multiple users are using the same datasource at the same time on a single Grafana instance, it could result in the wrong user identifier being used, and information for which the viewer is...
Improper Isolation or Compartmentalization
Overview dspy is a DSPy Affected versions of this package are vulnerable to Improper Isolation or Compartmentalization via the PythonInterpreter class. An attacker can access arbitrary files by executing untrusted code within the sandbox. Remediation Upgrade dspy to version 3.1.2 or higher...
CVE-2025-12695: Improper Isolation or Compartmentalization
The overly permissive sandbox configuration in DSPy allows attackers to steal sensitive files in cases when users build an AI agent which consumes user input and uses the “PythonInterpreter” class...
Improper Isolation or Compartmentalization
Overview Affected versions of this package are vulnerable to Improper Isolation or Compartmentalization of Groovy code provided by delegated administrators. A privileged attacker can execute arbitrary code remotely by providing malicious Groovy implementations that are loaded and executed by the...
Improper Isolation or Compartmentalization
Overview org.apache.syncope.core:syncope-core-provisioning-java is an Open Source system for managing digital identities in enterprise environments, implemented in Java EE technology and released under Apache 2.0 license. Affected versions of this package are vulnerable to Improper Isolation or...
Improper Isolation or Compartmentalization
Overview Affected versions of this package are vulnerable to Improper Isolation or Compartmentalization of Groovy code provided by delegated administrators. A privileged attacker can execute arbitrary code remotely by providing malicious Groovy implementations that are loaded and executed by the...
CVE-2025-57738: Improper Isolation or Compartmentalization
Apache Syncope offers the ability to extend / customize the base behavior on every deployment by allowing to provide custom implementations of a few Java interfaces; such implementations can be provided either as Java or Groovy classes, with the latter being particularly attractive as the machine...