CWE-830.

An issue in Vanderbilt Industries, Acre Security SPC5300.000 Main Board v.3.14.1 allows a physically proximate attacker to cause a denial of service via Spoofed SYN packets.

• Denial of service
• CWE-830

Minder does not sandbox http.send in Rego programs in github.com/mindersec/minder

• CWE-830

>=0.0.72, <0.0.84 · fixed in 0.0.84

Open WebUI Affected by an External Model Server (Direct Connections) Code Injection via SSE Events

• Code injection
• CWE-501

<0.6.35 · fixed in 0.6.35

In IZArc through 4.5, there is a Mark-of-the-Web Bypass Vulnerability.

• IZArc
• CWE-830

An issue was discovered in Ankitects Anki through 25.02.

• Anki
• CWE-830

WinZip: In WinZip through 29.0, there is a Mark-of-the-Web Bypass Vulnerability because of an…

• WinZip
• CWE-830

In Bandisoft Bandizip through 7.37, there is a Mark-of-the-Web Bypass Vulnerability.

• Bandisoft Bandizip
• CWE-830

In PeaZip through 10.4.0, there is a Mark-of-the-Web Bypass Vulnerability.

• PeaZip
• CWE-830

os/linux/elf.rb in Homebrew brew before 4.2.20 uses ldd to load ELF files obtained from untrusted sources, which allows attackers to achieve code execution via an ELF file with a custom .interp secti…

• CWE-830

OMERO.web must check that the JSONP callback is a valid function

• CWE-830

<5.26.0 · fixed in 5.26.0

Mozilla Firefox: An attacker was able to inject an event handler into a privileged object that would allow…

• Mozilla Firefox
• Mozilla Firefox ESR
• CWE-830

Teltonika Remote Management System: Teltonika’s Remote Management System versions prior to 4.10.0 have a feature allowing…

• Teltonika Remote Management System
• CWE-830

Command Injection in @theia/messages

• CWE-829
• CWE-830

<1.0.0 · fixed in 1.0.0