CWE-693: CWE-693

This vulnerability in Intel CIP software allows local attackers to escalate privileges from unprivileged to privileged access. It affects systems runn...

A protection mechanism failure in Microsoft Edge (Chromium-based) allows unauthorized attackers to execute arbitrary code over a network connection. T...

This CVE describes a sandbox escape vulnerability in macOS where a sandboxed process can bypass security restrictions. It affects macOS systems before...

This vulnerability in Android's DevicePolicyManagerService allows a local attacker to cause persistent denial of service through a logic error when ha...

This vulnerability allows unauthenticated remote attackers to bypass HTTP file policies on affected Cisco devices by sending specially crafted HTTP pa...

This vulnerability allows an unauthorized attacker to bypass a local security feature in Windows Remote Assistance. Attackers could potentially gain u...

This vulnerability allows a malicious Android app to block emergency calls (911/112) under specific conditions due to a logic error. It affects Androi...

This vulnerability allows attackers to create deceptive UI elements in Google Chrome through crafted HTML pages, tricking users into unintended action...

This vulnerability allows authenticated low-privileged attackers to bypass authorization controls on REST API endpoints in Cisco Nexus Dashboard and N...

This vulnerability allows attackers to bypass Windows Mark of the Web (MOTW) security protections over network connections. Attackers could trick user...

This vulnerability allows unauthenticated attackers to manipulate events in TYPO3 websites using the events2 extension. Attackers can activate or dele...

CVE-2025-67485 is a security bypass vulnerability in mad-proxy that allows attackers to circumvent HTTP/HTTPS traffic interception rules, potentially ...

The WP Headless CMS Framework plugin for WordPress has an authentication bypass vulnerability that allows unauthenticated attackers to access restrict...

This vulnerability allows a remote attacker to leak cross-origin data through Chrome DevTools due to insufficient policy enforcement. It affects users...

The OOPSpam Anti-Spam WordPress plugin is vulnerable to IP header spoofing, allowing unauthenticated attackers to bypass IP-based security controls li...

The WP Cerber Security plugin for WordPress versions up to 9.4 contains an IP protection bypass vulnerability. Attackers can circumvent IP blocking by...

This CVE describes a Python sandbox escape vulnerability in Cisco NX-OS Software that allows authenticated local attackers with Python execution privi...

This vulnerability allows authenticated local attackers with Python execution privileges on Cisco NX-OS devices to escape the Python sandbox and execu...

This vulnerability allows an authorized attacker to bypass local security features in GitHub Copilot and Visual Studio Code by exploiting improper val...

This vulnerability allows remote/synthetic users created through shared channels to receive email notifications and reset passwords using munged email...

This vulnerability in HCL BigFix Remote Control Lite Web Portal allows attackers to bypass Content Security Policy restrictions and execute malicious ...

Mattermost Desktop App versions up to 5.7.0 fail to properly prompt users for permission when opening external URLs, allowing attackers to force victi...

This vulnerability in Intel Tiber Edge Platform's Edge Orchestrator software allows authenticated users with local access to potentially escalate priv...

Mattermost mobile apps version 2.18.0 and earlier fail to disable autocomplete during password entry when visible password mode is selected. This allo...

A local privilege escalation vulnerability in Avast Free Antivirus allows attackers with administrative privileges to disable real-time protection and...

Mattermost Desktop App versions before 6.0.0 for macOS fail to enable Hardened Runtime when packaged for the Mac App Store, allowing attackers to bypa...

Envoy proxy versions 1.33.12, 1.34.10, 1.35.6, 1.36.2 and earlier have a CONNECT tunnel desynchronization vulnerability when configured in TCP proxy m...

HCL AION web applications are vulnerable due to missing standard security HTTP response headers. This allows attackers to more easily conduct common w...

The Archer AXE75 V1 router may accept L2TP VPN connections without IPSec encryption even when IPSec is enabled, allowing unencrypted VPN sessions. Thi...

Legality WHISTLEBLOWING software by DigitalPA fails to emit critical HTTP security headers by default, weakening browser-side defenses. This allows cl...

A vulnerability in Anthropic Sandbox Runtime versions before 0.0.16 allows sandboxed processes to bypass network restrictions when the sandbox policy ...

This vulnerability allows attackers to bypass Windows SmartScreen protection mechanisms when using ESTsoft ALZip on Windows systems. Attackers could t...

CVE-2025-65100 is a vulnerability in Isar integration system where setting ISAR_APT_SNAPSHOT_DATE alone fails to properly configure security distribut...