All CVEs — page 1094 of 1220
The complete archive, 25 per page, newest first. 30483 records. Search instead.
The flaw allows an unauthenticated attacker to overwrite or hijack another user's in-progress form submission by exploiting the submissionId parameter, leading to potential data tampering and persistence.
The flaw allows an authenticated attacker to bypass permission checks and modify form integration settings, potentially exposing internal network responses and credentials.
This vulnerability allows local users to execute arbitrary code as root by injecting malicious pppd options through a crafted VPN username, leading to privilege escalation.
Jawn's AsyncParser performs quadratic CPU work when parsing JSON tokens delivered in many small chunks, allowing remote attackers to cause denial of service through excessive CPU consumption.
Wire's Swift runtime allows negative length values in LENGTH_DELIMITED fields within unknown START_GROUP fields, causing process crashes when reading untrusted protobuf data. This vulnerability enables remote crash-only attacks without authentication or user interaction.
Jawn JSON parser allows unlimited nesting depth which can lead to JVM heap exhaustion and denial of service when processing untrusted JSON input. This vulnerability affects applications using Jawn versions prior to 1.7.0.