All CVEs — page 1100 of 1220
The complete archive, 25 per page, newest first. 30483 records. Search instead.
An unauthorized path traversal vulnerability allows attackers to access files outside the intended directory structure, potentially leading to sensitive data exposure. This affects ZohoCorp ManageEngine OpManager and Network Configuration Manager versions before 12.8.671.
This vulnerability allows an attacker to inject malicious SQL queries, potentially leading to data theft, manipulation, or system compromise.
A Server-Side Template Injection vulnerability in ZohoCorp ManageEngine's Configlet processing allows attackers with limited privileges to execute arbitrary code on the server. This affects multiple products including OpManager, NetFlow Analyzer, and Network Configuration Manager.
The Reachy Mini daemon lacks authentication for its app installation endpoint, allowing anyone to install arbitrary Python packages and execute their code on the robot.
A code execution flaw in Emacs versions prior to 31.2 allows arbitrary code execution during syntax checking of untrusted files, posing a significant security risk.
Pake applications allow any HTTPS content to invoke native commands due to misconfigured IPC settings and lack of proper access control, posing a significant risk to application security.
This vulnerability allows attackers with JavaScript execution (XSS) to gain read/write access to an entire directory tree through a file or folder picker in a Tauri application, posing a significant security risk.
The flaw allows arbitrary script execution when an application includes data: or blob: in its script-src directive, despite the presence of a nonce in the Content Security Policy, posing a significant security risk.