All CVEs — page 1027 of 1037
The complete archive, 25 per page, newest first. 25916 records. Search instead.
This vulnerability allows command injection through manipulation of the my2P4key argument in the esps.wan.repeater.set/repeaterproc function, enabling remote code execution.
The flaw allows unauthenticated attackers to exploit a privilege escalation vulnerability by submitting a crafted POST request, leading to the creation of a WordPress Administrator account.
The flaw allows unauthenticated attackers to inject arbitrary scripts via the customer email field in the booking checkout form due to insufficient input sanitization and output escaping.
The flaw allows an authenticated contributor to inject SQL through the Admin Search AJAX request, enabling time-based blind SQL injection. This matters because it can lead to database compromise without full admin privileges.
The flaw allows unauthenticated attackers to inject SQL queries and read sensitive data from the database, including WordPress user credentials.
The flaw is a SQL Injection vulnerability in the ERP: Complete HR, Accounting & CRM Suite plugin due to insufficient parameter escaping and direct query interpolation, allowing authenticated attackers with specific roles to extract sensitive information from the database.
The vulnerability in H3C NX15 V100R017 allows remote attackers to manipulate service.add via the /api/esps endpoint, leading to potential high impact exposure. This matters because it can be exploited remotely without user interaction.
The flaw allows os command injection via file argument manipulation in H3C NX15 V100R017's /api/esps endpoint, enabling remote code execution.
A stack-based buffer overflow vulnerability exists in UTT HiPER 1200GW versions up to v2.5.3-170306 due to improper handling of the timestart argument in the strcpy function. This allows remote attackers to execute arbitrary code.
The flaw allows arbitrary file write through directory traversal sequences in the filename, enabling potential data corruption or malicious code execution on affected Android devices.
The flaw is a stack-based buffer overflow in the strcpy function due to improper handling of the tempName argument, allowing remote attackers to exploit it. This matters because it can lead to arbitrary code execution.
The flaw is a stack-based buffer overflow in the strcpy function due to improper handling of the cipher argument, allowing remote attackers to exploit it. This matters because it can lead to arbitrary code execution or other severe impacts.
The vulnerability allows for SQL injection through manipulation of the keyid argument in the logindojojs file, enabling remote attackers to exploit it for unauthorized access or data theft.
The vulnerability allows for SQL injection through manipulation of the FilterString argument in the GetStoredClassByFilter function, enabling remote code execution.
The flaw in OpenSIPS allows an attacker to overflow a buffer by providing a long username, which can corrupt global data and alter the server's routing behavior.