All CVEs — page 1101 of 1220
The complete archive, 25 per page, newest first. 30483 records. Search instead.
The WordPress plugin 'Rename wp-login.php to anything you want' contains a time-based SQL injection vulnerability in its 'log' parameter that allows unauthenticated attackers to extract database information without needing credentials. This affects all versions up to 2.0.1.
An unauthenticated remote attacker can access internal metadata service endpoints in Apache Doris Frontend due to improper authentication that relies on client-supplied node information without sufficient verification of the requesting party.
CGServiSign is vulnerable to OS Command Injection, allowing unauthenticated attackers to execute arbitrary commands on the victim's local computer.
A use-after-free vulnerability in Foxit PDF Editor/Reader allows attackers to crash the application by manipulating PDF annotations, potentially leading to further exploitation.
A use-after-free vulnerability in Foxit PDF Editor/Reader allows attackers to trigger an application crash via embedded JavaScript, leading to potential data loss or system instability.
The flaw in Foxit PDF Editor/Reader allows out-of-bounds write during JPEG2000 image metadata processing, potentially leading to arbitrary code execution.
A vulnerability in Foxit PDF Editor/Reader’s update mechanism allows local attackers to replace an update package, leading to potential execution of arbitrary code with elevated privileges.
This vulnerability allows man-in-the-middle attackers to bypass certificate validation and package integrity checks in Foxit PDF Editor/Reader, potentially enabling arbitrary code execution with system privileges.
A heap-based out-of-bounds write vulnerability in Foxit PDF Editor/Reader’s PRC parser can lead to memory corruption and application crashes due to insufficient validation of vertex indices in triangular fan texture meshes.
A use-after-free vulnerability in Foxit PDF Editor/Reader allows attackers to crash the application by manipulating malformed PDF form fields, potentially leading to denial of service.
A use-after-free vulnerability in Foxit PDF Editor/Reader allows embedded JavaScript to access form-field references after the fields have been released, potentially leading to an application crash.
A use-after-free vulnerability in Foxit PDF Editor/Reader allows attackers to exploit crafted PDF files to cause memory corruption and application crashes.