All CVEs — page 1064 of 1220
The complete archive, 25 per page, newest first. 30483 records. Search instead.
The flaw allows unauthenticated OAuth2 token introspection, enabling attackers to confirm token validity and extract metadata, potentially translating user identifiers across Relying Parties.
The flaw allows execution of Python code from an obfuscated URL, enabling arbitrary code execution as the user.
This flaw allows an attacker to disable a path or route a later request past an authorization check by leveraging a dispatch memo keyed on the request path alone, potentially leading to unauthorized access or denial of service.
The iSteamX mobile application's AWS policy flaw allows authenticated users to access wildcard MQTT topics, exposing other users' device data and potentially scalding due to unintended device activation.
A stack-based buffer overflow exists in Espruino 2v29 where a mismatched pointer type causes an 8-byte write to adjacent stack memory when handling JavaScript error stack traces. This allows remote attackers to potentially corrupt program execution flow and execute arbitrary code.
The flaw in the Botslab G980H dash camera firmware allows an attacker to intercept firmware updates and install modified firmware, leading to potential execution of unauthorized code.