CWE-829

An unintended require vulnerability in <v0.5.5 larvitbase-api may allow an attacker to load arbitrary non-production cod

A same-origin policy violation occurs allowing the theft of cross-origin images through a combination of SVG filters and

A remote file include (RFI) issue was discovered in Enghouse Web Chat 6.2.284.34. One can replace the localhost attribut

IBM Content Navigator 3.0CD is vulnerable to local file inclusion, allowing an attacker to access a configuration file i

ruby193 uses an insecure LD_LIBRARY_PATH setting.

The cache directory on the local file system is set to be world writable. Firefox defaults to extracting libraries from

Kibana versions before 6.4.3 and 5.6.13 contain an arbitrary file inclusion flaw in the Console plugin. An attacker with

An issue was discovered on KONE Group Controller (KGC) devices before 4.6.5. Unauthenticated Local File Inclusion and Fi

playSMS through 1.4.2 allows Privilege Escalation through Daemon abuse.

A vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 and below could allow an attacker to pe

Node.js: All versions prior to Node.js 6.15.0: Debugger port 5858 listens on any interface by default: When the debugger

A Local File Inclusion vulnerability in the Site Editor plugin through 1.1.1 for WordPress allows remote attackers to re

Spring Framework, versions 5.0.x prior to 5.0.7 and 4.3.x prior to 4.3.18 and older unsupported versions, allows web app

procps-ng before version 3.3.15 is vulnerable to a local privilege escalation in top. If a user runs top with HOME unset

MyBB Group MyBB contains a File Inclusion vulnerability in Admin panel (Tools and Maintenance -> Task Manager -> Add New

An information disclosure vulnerability exists when affected Microsoft browsers improperly allow cross-frame interaction

A flaw in the IBM J9 VM class verifier allows untrusted code to disable the security manager and elevate its privileges.

A 3rd party development library including with Drupal 8 development dependencies is vulnerable to remote code execution.