Fallos del tipo CWE-265

10 resultados

CVE-2020-1889—A security feature bypass issue in WhatsApp Desktop versions prior to v0.3.4932 could have allowed for sandbox escape in Electron and escalaEPSS 4.8%CVE-2023-26122HIGHAll versions of the package safe-eval are vulnerable to Sandbox Bypass due to improper input sanitization. The vulnerability is derived fromEPSS 2.1%CVE-2023-5223MEDIUMHimitZH HOJ Topic sandboxEPSS 0.9%CVE-2025-5321MEDIUMaimhubio aim run_view Object query.py RestrictedPythonQuery privilege escalationEPSS 0.5%CVE-2026-9368MEDIUMNousResearch hermes-agent Environment Variable code_execution_tool.py execute_code sandboxEPSS 0.4%CVE-2026-6878MEDIUMByteDance verl grader.py math_equal sandboxEPSS 0.3%CVE-2026-6224MEDIUMnocobase plugin-workflow-javascript Vm.js createSafeConsole sandboxEPSS 0.3%CVE-2024-2007MEDIUMOpenBMB XAgent Privileged Mode sandboxEPSS 0.3%CVE-2025-5874LOWRedash getattr python.py run_query sandboxEPSS 0.2%CVE-2026-6117MEDIUMAstrBotDevs AstrBot install-upload Endpoint plugin.py install_plugin_upload sandboxEPSS 0.2%