CWE-829: CWE-829

This vulnerability in JetBrains IntelliJ IDEA allows unexpected plugin startup due to automatic Language Server Protocol (LSP) server activation, pote...

This vulnerability allows remote attackers to inject malicious scripts or HTML into any tenant's documentation site by manipulating the subdomain para...

This vulnerability in Anki 24.04 allows arbitrary file read through specially crafted LaTeX flashcards that bypass sanitization by using the verbatim ...

This CVE allows CSS injection in Roundcube Webmail due to improper handling of comments. Attackers can inject malicious CSS styles that could lead to ...

The Mattermost Desktop App vulnerability allows malicious Mattermost servers to expose preload script functionality to untrusted external sites when u...

This vulnerability allows local attackers with the ability to modify osqueryd configurations to execute arbitrary code via parameter injection in Elas...

OpenAI Codex CLI versions before 0.9.0 automatically approve ripgrep (rg) command execution even when potentially dangerous flags like --pre, --hostna...

This vulnerability in JetBrains TeamCity allows attackers to load malicious extensions via Maven embedder through project configuration. It affects Te...