All CVEs — page 512 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
Pake applications allow any HTTPS content to invoke native commands due to misconfigured IPC settings and lack of proper access control, posing a significant risk to application security.
This vulnerability allows attackers with JavaScript execution (XSS) to gain read/write access to an entire directory tree through a file or folder picker in a Tauri application, posing a significant security risk.
The flaw allows arbitrary script execution when an application includes data: or blob: in its script-src directive, despite the presence of a nonce in the Content Security Policy, posing a significant security risk.