CVE-2025-55671

Uncontrolled search path element issue exists in TkEasyGUI versions prior to v1.0.22. If this vulnerability is exploited, arbitrary code may be executed with the privilege of running the program...

Multiple vulnerabilities in TkEasyGUI

Overview TkEasyGUI provided by kujirahand contains multiple vulnerabilities listed below. OS command injection CWE-78 - CVE-2025-55037 Uncontrolled search path element CWE-427 - CVE-2025-55671 Satoki Tsuji of Ikotas Labs, Inc. reported these vulnerabilities to IPA. JPCERT/CC coordinated with the...

Uncontrolled Search Path Element

Overview TkEasyGUI is a TkEasyGUI is simple GUI Library for Python3 with Tkinter Affected versions of this package are vulnerable to Uncontrolled Search Path Element via the search path element. An attacker can execute arbitrary code with the privileges of the running program by placing a malicio...

CVE-2025-55671

Uncontrolled search path element issue exists in TkEasyGUI versions prior to v1.0.22. If this vulnerability is exploited, arbitrary code may be executed with the privilege of running the program...

CVE-2025-55671

CVE-2025-55671 affects TkEasyGUI (Python) prior to v1.0.22. The issue is an Uncontrolled search path element (CWE-427) in the library, allowing arbitrary code execution with the program’s privileges if exploited. The vulnerability is tied to TkEasyGUI before version 1.0.22, per multiple sources, ...

CVE-2025-55671

Uncontrolled search path element issue exists in TkEasyGUI versions prior to v1.0.22. If this vulnerability is exploited, arbitrary code may be executed with the privilege of running the program...

JVN#48739895: Multiple vulnerabilities in TkEasyGUI

TkEasyGUI provided by kujirahand contains multiple vulnerabilities listed below. OS command injection CWE-78 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N Base Score 9.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Base Score 9.8 CVE-2025-55037 Uncontrolled search path...

PT-2025-36112

Name of the Vulnerable Software and Affected Versions TkEasyGUI versions prior to 1.0.22 Description An uncontrolled search path element issue exists that may lead to arbitrary code execution with the privileges of the running program. Recommendations Update TkEasyGUI to version 1.0.22 or later...

Unspecified Vulnerability in Akinsoft MyRezzta

Aiseesoft is a technology company specializing in software development. Akinsoft MyRezzta has a security vulnerability that stems from improper execution of behavioral workflows and uncontrolled consumption of resources, no details of the vulnerability are provided at this time...

CVE-2025-55671: Uncontrolled Search Path Element

Uncontrolled search path element issue exists in TkEasyGUI versions prior to v1.0.22. If this vulnerability is exploited, arbitrary code may be executed with the privilege of running the program...

ROS-20250904-06

A vulnerability in the Protobuf Pure-Python structured data serialization library is related to uncontrolled recursion when analyzing unreliable data containing an arbitrary number of recursive groups, recursive messages, or series of SGROUP tags. Exploitation of the vulnerability could allow an...

CVE-2025-26423: Uncontrolled Resource Consumption

In validateIpConfiguration of WifiConfigurationUtil.java, there is a possible way to trigger a permanent DoS due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-58355: Improper Limitation of a Pathname to a Restricted Directory

Soft Serve is a self-hostable Git server for the command line. In versions 0.9.1 and below, attackers can create or override arbitrary files with uncontrolled data through its SSH API. This issue is fixed in version 0.10.0...

CVE-2025-43772: Uncontrolled Resource Consumption

Kaleo Forms Admin in Liferay Portal 7.0.0 through 7.4.3.4, and Liferay DXP 7.4 GA, 7.3 GA through update 27, and older unsupported versions does not restrict the saving of request parameters in the portlet session, which allows remote attackers to consume system memory leading to denial-of-servic...

CVE-2024-40664: Uncontrolled Resource Consumption

In setupAccessibilityServices of AccessibilityFragment.java , there is a possible way to hide an enabled accessibility service due to a logic error in the code. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitati...

Elasticsearch Uncontrolled Resource Consumption vulnerability

...

K000154575: Apache Commons Lang vulnerability CVE-2025-48924

Security Advisory Description Uncontrolled Recursion vulnerability in Apache Commons Lang. This issue affects Apache Commons Lang: Starting with commons-lang:commons-lang 2.0 to 2.6, and, from org.apache.commons:commons-lang3 3.0 before 3.18.0. The methods ClassUtils.getClass... can throw...

The vulnerability of the IntelliJ IDEA integrated development environment lies in the fact that functions from an unverified and uncontrolled area can be enabled, allowing a malicious actor to execute arbitrary plugins.

The vulnerability of the IntelliJ IDEA software development environment lies in the inclusion of functions from an unverified and uncontrolled area. Exploiting this vulnerability can allow attackers to execute arbitrary plugins...

The vulnerability of the PDF document viewing program Foxit PDF Reader (formerly Foxit Reader) and the PDF file editing program Foxit PDF Editor (formerly Foxit PhantomPDF) is related to an uncontrolled search path element, which allows a malicious user to escalate their privileges and execute arbitrary code with SYSTEM rights.

The vulnerability of the PDF document viewing program Foxit PDF Reader formerly Foxit Reader and the PDF file editing program Foxit PDF Editor formerly Foxit PhantomPDF is related to an uncontrolled search path element. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2025-52494: Uncontrolled Resource Consumption

Adacore Ada Web Server AWS before 25.2 is vulnerable to a denial-of-service DoS condition due to improper handling of SSL handshakes during connection initialization. When a client initiates an HTTPS connection, the server performs the SSL handshake before assigning the connection to a processing...