Lucene search
+L

90 matches found

BDU FSTEC
BDU FSTEC
added 2026/06/10 12:0 a.m.19 views

The vulnerability of the built-in mobile security firewall Ivanti Sentry lies in the lack of measures to neutralize specific elements, allowing a intruder to execute arbitrary commands with root privileges.

The vulnerability of the built-in mobile security firewall, Ivanti Sentry, is related to the failure to take measures to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands with root privileges...

10CVSS6.4AI score0.99041EPSS
Exploits6References5Affected Software1
Redos
Redos
added 2026/05/24 12:0 a.m.13 views

ROS-20260524-73-0028

Vulnerability in vim related to failure to take measures to neutralize special elements used in operating system commands. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary commands...

7.3CVSS6.9AI score0.00834EPSS
Exploits0
Cvelist
Cvelist
added 2026/05/13 5:35 p.m.63 views

CVE-2026-44008 vm2: Snabox breakout via `neutralizeArraySpeciesBatch`

vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.2, the new method neutralizeArraySpeciesBatch works with objects from the other side but can call into this side via getter on the array prototype exposing objects of the wrong side into the sandbox. This can be used to get host objects...

9.8CVSS0.00851EPSS
Exploits1References1
OSV
OSV
added 2026/05/13 5:35 p.m.4 views

CVE-2026-44008 vm2: Snabox breakout via `neutralizeArraySpeciesBatch`

vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.2, the new method neutralizeArraySpeciesBatch works with objects from the other side but can call into this side via getter on the array prototype exposing objects of the wrong side into the sandbox. This can be used to get host objects...

9.8CVSS7.6AI score0.00851EPSS
Exploits1References6
OSV
OSV
added 2026/05/08 3:58 p.m.64 views

GHSA-9QJ6-QJGG-37QQ vm2 has sandbox breakout via `neutralizeArraySpeciesBatch`

Summary VM2 suffers from a sandbox breakout vulnerability. This allows attackers to write code which can escape from the VM2 sandbox and execute arbitrary commands on the host system. Details The new method neutralizeArraySpeciesBatch works with objects from the other side but can call into this...

9.8CVSS6.4AI score0.00851EPSS
Exploits1References4
Redos
Redos
added 2026/05/05 12:0 a.m.10 views

ROS-20260505-73-0041

Vulnerability in python3.10 related to failure to take measures to neutralize crlf sequences. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code...

5.7CVSS6.2AI score0.0055EPSS
Exploits0
BDU FSTEC
BDU FSTEC
added 2026/03/06 12:0 a.m.5 views

The vulnerability of the Vim text editor, related to the lack of measures to neutralize special elements, allows a hacker to execute arbitrary commands.

The vulnerability of the Vim text editor is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows an attacker to execute arbitrary commands...

7.8CVSS6.3AI score0.01162EPSS
Exploits0References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2026/02/25 12:0 a.m.11 views

The vulnerability of the VoIP gateway software Telecom MG, related to the failure to implement measures to neutralize special elements, allows a perpetrator to execute arbitrary codes.

The vulnerability of the VoIP gateway software of Telecom MG is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9CVSS6.1AI score
Exploits0Affected Software1
Redos
Redos
added 2026/02/09 12:0 a.m.10 views

ROS-20260209-73-0020

PowerDNS Recursor DNS server vulnerability is related to failure to take measures to neutralize special elements in the output data. Exploitation of the vulnerability could allow a remote attacker to affect the integrity and availability of protected information...

6.5CVSS5.7AI score0.00122EPSS
Exploits0
hivepro
hivepro
added 2026/01/12 12:57 p.m.9 views

What Is Continuous Threat Monitoring? A Full Guide

Relying on periodic security scans is like checking your rearview mirror once every ten miles on a busy highway. You get a snapshot of what’s behind you, but you miss the real-time dangers closing in. This reactive approach leaves dangerous gaps for attackers to exploit, keeping your security tea...

7.4AI score
Exploits0
Redos
Redos
added 2025/08/21 12:0 a.m.4 views

ROS-20250821-03

EMACS text editor vulnerability exists due to failure to take measures to neutralize special elements. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary commands...

8.8CVSS7.3AI score0.0256EPSS
Exploits0
BDU FSTEC
BDU FSTEC
added 2025/07/30 12:0 a.m.9 views

The vulnerability of the Broker VM component of the Cortex XDR security platform, related to the failure to neutralize specific elements, allows a perpetrator to execute arbitrary code.

The vulnerability of the Broker VM component in the Cortex XDR security platform is related to the failure to take measures to neutralize specific elements. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code with root privileges...

7.8CVSS5.9AI score0.00515EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/07/21 12:0 a.m.16 views

The vulnerability of the Endpoint Manager Mobile app for managing the lifecycle of mobile devices and mobile applications (formerly known as MobileIron Core) arises from the lack of measures taken to neutralize specific elements. This allows a perpetrator to execute arbitrary code.

The vulnerability of the Ivanti Endpoint Manager Mobile EPMM application for managing the lifecycle of mobile devices and mobile applications formerly known as MobileIron Core is related to the lack of measures taken to neutralize special elements used in the operating system. Exploiting this...

9CVSS7.5AI score0.14809EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/06/09 12:0 a.m.8 views

The vulnerability of the Jinja HTML templating compiler lies in its failure to properly eliminate special elements during template creation. This allows attackers to trigger a service failure.

The vulnerability of the Jinja HTML template compiler relates to the lack of measures taken to neutralize special elements in the template creation mechanism. Exploiting this vulnerability can allow an attacker to cause service failures...

7.3CVSS7.2AI score0.00476EPSS
Exploits0References11Affected Software6
BDU FSTEC
BDU FSTEC
added 2025/04/30 12:0 a.m.11 views

The vulnerability of microprogrammed software in Cisco Nexus 3000 Series and Cisco Nexus 9000 Series virtual switches arises from the failure to take measures to neutralize special elements, allowing attackers to execute arbitrary code.

The vulnerability of microprogrammed software in Cisco Nexus 3000 Series and Cisco Nexus 9000 Series switches is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability can allow a perpetrator to execute arbitrary code on behalf of an administrator with...

5.2CVSS6AI score0.00467EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2025/04/22 12:0 a.m.10 views

The vulnerability of TOTOLINK A7100RU router’s microprogramming software, which exists due to the lack of measures to neutralize special elements, allows intruders to inject arbitrary commands.

The vulnerability of TOTOLINK A7100RU router microprogramming software exists due to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to inject arbitrary commands...

10CVSS7.9AI score0.02063EPSS
Exploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.9 views

The vulnerability of the ColdFusion software platform, related to the lack of measures to neutralize special elements, allows attackers to execute arbitrary code.

The vulnerability of the ColdFusion software platform is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

8CVSS8.3AI score0.02349EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.7 views

The vulnerability of the ColdFusion software platform, related to the lack of measures to neutralize special elements, allows attackers to execute arbitrary code.

The vulnerability of the ColdFusion software platform is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows an attacker to execute arbitrary code...

7.5CVSS8.3AI score0.05142EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/03/18 12:0 a.m.10 views

The vulnerability of Siemens Scalance LPE9403 industrial switches’ microprogramming software lies in the lack of measures to neutralize special elements, allowing attackers to execute arbitrary code.

The vulnerability of Siemens Scalance LPE9403 industrial switches’ microprogramming software is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9CVSS5.9AI score0.00666EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/02/25 12:0 a.m.18 views

The vulnerability of UniFi Protect Camera surveillance systems lies in the lack of measures to neutralize special elements, allowing violators to bypass security restrictions and execute arbitrary codes.

The vulnerability of UniFi Protect Camera surveillance systems lies in the lack of measures to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to bypass security restrictions and execute arbitrary code...

7.5CVSS7.8AI score0.00722EPSS
Exploits0References3Affected Software1
Rows per page
Query Builder