CWE-424: CWE-424

This vulnerability allows an unauthenticated local attacker to escape the restricted kiosk mode environment in HiMed Cockpit medical devices and gain ...

This vulnerability in Gitea allows attackers to bypass file extension restrictions by manipulating attachment names through the attachment API. Attack...

This vulnerability in KioWare for Windows allows attackers to bypass the kiosk software's restrictions during a brief time window before automatic log...

CVE-2023-5165 allows unprivileged users to bypass Enhanced Container Isolation (ECI) restrictions in Docker Desktop by accessing a debug shell during ...

This vulnerability allows unprivileged users on Docker Desktop to bypass Enhanced Container Isolation (ECI) restrictions by connecting to Docker's raw...

This vulnerability in Arris VIP1113 devices allows remote attackers to overwrite arbitrary files via TFTP by using specially crafted filenames contain...

CVE-2025-46654 is a cross-site scripting (XSS) vulnerability in CodiMD that allows attackers to bypass Content Security Policy (CSP) protections by up...

This vulnerability in desknet's NEO AppSuite allows attackers to create malicious applications through improper protection of alternate paths. It affe...

A local privilege bypass vulnerability in Palo Alto Networks Prisma Browser on Windows allows non-admin users to circumvent screenshot controls. This ...