All CVEs — page 281 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
Hydra framework's instantiate() function has incomplete validation that allows attackers to bypass target blacklisting and execute arbitrary code with application privileges. This affects versions 1.3.4 through 1.3.6 and 1.4.0.dev9.
Hydra framework allows attackers to inject arbitrary Python classes into logging configuration, potentially leading to remote code execution through logging handlers and formatters. This vulnerability affects versions prior to 1.3.6 and 1.4.0.dev9 where logging configuration bypasses Hydra's security policies.
The flaw allows attackers to execute arbitrary Python code through a configurable dotted path in Hydra's sweeper functionality, bypassing execution whitelists and potentially leading to full system compromise.
A race condition in Google Chrome's font handling system allows remote attackers to execute arbitrary code outside the sandbox by crafting a malicious HTML page. This represents a critical security flaw because it can lead to full system compromise when users visit compromised websites.
A use-after-free vulnerability in Google Chrome prior to 155.0.8059.39 allows remote attackers to execute arbitrary code within the sandbox via a crafted HTML page.
A use-after-free vulnerability in the PDF handling of Google Chrome prior to 155.0.8059.39 allows remote attackers to execute arbitrary code within the sandbox via a specially crafted HTML page.
This flaw involves a use after free vulnerability in ANGLE within Google Chrome on Android versions prior to 155.0.8059.39, allowing remote attackers to execute arbitrary code outside the sandbox via a crafted HTML page.
This flaw involves an integer overflow in Google Chrome prior to version 155.0.8059.39, allowing a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.
This flaw involves improper input validation in Google Chrome on iOS, allowing remote attackers to execute arbitrary code via a crafted HTML page, which could lead to a breach of sandbox security.
A race condition in Google Chrome's Core on macOS allows remote attackers to execute arbitrary code outside the sandbox after compromising the renderer process through social engineering. This represents a critical privilege escalation vulnerability that can lead to full system compromise.
A use-after-free vulnerability in the Parser of Google Chrome prior to 155.0.8059.39 allows remote attackers to execute arbitrary code within the sandbox by tricking users into visiting a crafted HTML page.
A flaw in how Chrome on Mac handles web app installations allows a compromised renderer process to execute arbitrary code outside the sandbox, potentially leading to full system compromise. This affects Google Chrome and macOS systems.