VulnSea

CWE-829

CVEs classified under CWE-829, newest first.

71 CVEsRSS

CVE-2026-43999Critical· 9.9
4mo ago

vm2 is an open source vm/sandbox for Node.js

vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.0, NodeVM's builtin allowlist can be bypassed when the module builtin is allowed (including via the '*' wildcard). The module builtin exposes Node's Module._load(), which loads …

▾ Midnightvm2_project · vm2EPSS 0.97%via NVD
CVE-2026-43003High· 8.0
4mo ago

An issue was discovered in OpenStack ironic-python-agent 1.0.0 through 11.5.0

An issue was discovered in OpenStack ironic-python-agent 1.0.0 through 11.5.0. Ironic Python Agent (IPA) sometimes executes grub-install from within a chroot of the deployed partition image, leading to code execution in the case of a mal…

▾ Twilightopenstack · ironic_python_agentEPSS 1.1%via NVD
CVE-2026-1342High· 8.5
5mo ago

IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0 through 11.0.2 and IBM Security Verify Access 10.0 through 10.0.9.1 could allow a…

IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0 through 11.0.2 and IBM Security Verify Access 10.0 through 10.0.9.1 could allow a…

▾ Twilightibm · security_verify_accessEPSS 0.18%via NVD
CVE-2026-34442Medium· 5.4
6mo ago

FreeScout is a free help desk and shared inbox built with PHP's Laravel framework

FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.211, host header manipulation in FreeScout version (http://localhost:8080/system/status) allows an attacker to inject an arbitrary do…

▾ Sunlitfreescout · freescoutEPSS 0.32%via NVD
CVE-2026-32920High· 8.4
6mo ago

OpenClaw before 2026.3.12 automatically discovers and loads plugins from .OpenClaw/extensions/ without explicit trust verification, allowing arbitrary code execution

OpenClaw before 2026.3.12 automatically discovers and loads plugins from .OpenClaw/extensions/ without explicit trust verification, allowing arbitrary code execution. Attackers can execute malicious code by including crafted workspace pl…

▾ Twilightopenclaw · openclawEPSS 0.41%via NVD
CVE-2025-70974Critical· 10.0
8mo ago

Fastjson before 1.2.48 mishandles autoType because, when an @type key is in a JSON document, and the value of that key is the name of a Java class, there may be calls to certain public methods of that class

Fastjson before 1.2.48 mishandles autoType because, when an @type key is in a JSON document, and the value of that key is the name of a Java class, there may be calls to certain public methods of that class. Depending on the behavior of …

▾ MidnightEPSS 0.77%via NVD
CVE-2024-32011High· 8.8
10mo ago

A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2)

A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2). The affected application is vulnerable to run arbitrary commands via the user interface. This user interface can be used via the network and al…

▾ TwilightEPSS 0.39%via NVD
CVE-2021-41841High· 8.2
4y ago

An issue was discovered in AhciBusDxe in the kernel 5.0 through 5.5 in Insyde InsydeH2O

An issue was discovered in AhciBusDxe in the kernel 5.0 through 5.5 in Insyde InsydeH2O. There is an SMM callout that allows an attacker to access the System Management Mode and execute arbitrary code. This occurs because of Inclusion of…

▾ Twilightinsyde · insydeh2oEPSS 0.30%via NVD
CVE-2021-33626High· 7.8
4y ago

A vulnerability exists in SMM (System Management Mode) branch that registers a SWSMI handler that does not sufficiently check or validate the allocated buffer pointer(QWORD values for CommBuffer)

A vulnerability exists in SMM (System Management Mode) branch that registers a SWSMI handler that does not sufficiently check or validate the allocated buffer pointer(QWORD values for CommBuffer). This can be used by an attacker to corru…

▾ Twilightinsyde · insydeh2oEPSS 0.31%via NVD
CVE-2021-26272Medium· 6.5
5y ago

It was possible to execute a ReDoS-type attack inside CKEditor 4 before 4.16 by persuading a victim to paste crafted URL-like text into the editor, and then press Enter or Space (in the Autolink plugin).

It was possible to execute a ReDoS-type attack inside CKEditor 4 before 4.16 by persuading a victim to paste crafted URL-like text into the editor, and then press Enter or Space (in the Autolink plugin).

▾ Sunlitckeditor · ckeditorEPSS 2.2%via NVD
CVE-2021-26271Medium· 6.5
5y ago

It was possible to execute a ReDoS-type attack inside CKEditor 4 before 4.16 by persuading a victim to paste crafted text into the Styles input of specific dialogs (in the Advanced Tab for Dialogs plugin).

It was possible to execute a ReDoS-type attack inside CKEditor 4 before 4.16 by persuading a victim to paste crafted text into the Styles input of specific dialogs (in the Advanced Tab for Dialogs plugin).

▾ Sunlitckeditor · ckeditorEPSS 2.0%via NVD
CWE-829 vulnerabilities (CVEs) — page 3 · VulnSea