CWE-269

Zulip Server before 2.1.5 allows reverse tabnapping via a topic header link.

An issue was discovered in Pi-Hole through 5.0. The local www-data user has sudo privileges to execute the pihole core script as root without a password, which could allow an attacker to obtain root access via shell metacharacters to this script’s setdns command.

A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka ‘Microsoft Graphics Components Remote Code Execution Vulnerability’.

ASRock 4×4 BOX-R1000 before BIOS P1.40 allows privilege escalation via code execution in the SMM.

Artica Pandora FMS 7.44 allows privilege escalation.