All CVEs — page 1053 of 1063
The complete archive, 25 per page, newest first. 26556 records. Search instead.
The flaw allows arbitrary file write through directory traversal sequences in the filename, enabling potential data corruption or malicious code execution on affected Android devices.
The flaw is a stack-based buffer overflow in the strcpy function due to improper handling of the tempName argument, allowing remote attackers to exploit it. This matters because it can lead to arbitrary code execution.
The flaw is a stack-based buffer overflow in the strcpy function due to improper handling of the cipher argument, allowing remote attackers to exploit it. This matters because it can lead to arbitrary code execution or other severe impacts.
The vulnerability allows for SQL injection through manipulation of the keyid argument in the logindojojs file, enabling remote attackers to exploit it for unauthorized access or data theft.
The vulnerability allows for SQL injection through manipulation of the FilterString argument in the GetStoredClassByFilter function, enabling remote code execution.
The flaw in OpenSIPS allows an attacker to overflow a buffer by providing a long username, which can corrupt global data and alter the server's routing behavior.
The flaw allows admin-privileged attackers to probe internal network resources by submitting arbitrary URLs without proper validation, potentially reading sensitive information from cloud metadata services and internal APIs.
The flaw allows authenticated non-admin users to manage server-wide embedding backend configuration, leading to plaintext transmission of sensitive data or denial of service.
The flaw allows session fixation attacks due to un invalidated sessions on login in Ghost Admin versions from 2.2.0 to 6.54.1, posing a medium security risk.
The vulnerability allows a staff user to write files outside the intended directory via custom themes, potentially altering system behavior.
The flaw is a buffer overflow in open62541 1.5.5's attribute reading logic, allowing remote attackers to cause a denial of service. This matters because it can lead to system crashes without proper mitigation.