All CVEs — page 1084 of 1220
The complete archive, 25 per page, newest first. 30483 records. Search instead.
The flaw allows unauthenticated attackers to include and execute arbitrary PHP code via the `vcv-template` parameter, leading to potential code execution and data breaches.
The flaw in GIMP allows out-of-bounds write vulnerabilities when processing specially crafted GIMPressionist preset files, potentially leading to arbitrary code execution.
The flaw is an Origin Validation Error in the YOP Poll plugin for WordPress, allowing unauthenticated attackers to steal a REST nonce and change the Administrator's email and password, leading to full account takeover.
Path traversal vulnerability allows attackers to access sensitive files. This flaw is critical as it can lead to data theft or system compromise.
SQL Injection vulnerability allows attackers to execute arbitrary SQL commands, potentially leading to data theft or corruption.
SQL Injection vulnerability allows attackers to execute arbitrary SQL commands, potentially leading to data theft or corruption.
The flaw is an Improper Authentication vulnerability in DIAEnergie that allows Authentication Bypass, enabling unauthorized access to the system. This matters because it can lead to significant data compromise and operational disruption.
The eesy_ID2WP plugin allows unauthenticated attackers to read arbitrary files on the server through a path traversal vulnerability in the id2wp_path parameter. This could expose sensitive configuration files, database credentials, or other confidential data.