All CVEs — page 1089 of 1220
The complete archive, 25 per page, newest first. 30483 records. Search instead.
The flaw in librsvg allows attackers to cause a use-after-free error by processing SVG documents with nested XML inclusions and duplicate entity declarations, potentially leading to a denial of service or arbitrary code execution.
A SQL injection vulnerability in W4 Post List plugin allows attackers to perform blind SQL injection attacks, potentially leading to unauthorized data access and manipulation. This is particularly concerning because it affects a widely-used WordPress plugin.
The Klever-Go blockchain node has a memory exhaustion vulnerability in its WebSocket API where unauthenticated clients can create unlimited subscriptions without size limits or connection caps, potentially leading to node crashes and consensus disruption.
The flaw allows a remote client to change global log levels and formatting options, potentially suppressing normal logs and increasing verbosity, impacting operator visibility and operational information access.
The flaw in Ansible Automation Platform allows a user with workflow-admin permission to copy a WorkflowJobTemplate and launch jobs in unauthorized instance groups, including the control-plane, bypassing security boundaries.