All CVEs — page 1111 of 1220
The complete archive, 25 per page, newest first. 30483 records. Search instead.
The vulnerability allows an out-of-bounds write that could lead to arbitrary code execution, posing a significant risk to users opening malicious files.
An Out-of-bounds Read vulnerability in UniFi gateway devices allows remote attackers to trigger a Denial of Service condition by sending specially crafted network packets. This means an attacker can disrupt service on affected devices without needing authentication or user interaction.
An out-of-bounds read vulnerability in UniFi gateway devices allows remote attackers to trigger a denial of service condition by sending specially crafted network packets, potentially causing the device to crash or become unresponsive.
An out-of-bounds write vulnerability in UniFi gateway devices allows remote attackers to trigger a denial of service condition by sending specially crafted network packets. This flaw could allow an attacker with network access to crash the device and disrupt network services.
An out-of-bounds write vulnerability in UniFi gateway devices allows remote attackers to cause a denial of service by writing data beyond the allocated memory buffer. This flaw can lead to device instability and complete service disruption.
This flaw allows an attacker to upload arbitrary files outside the workspace by manipulating the file_path parameter in confluence_upload_attachment, potentially leading to unauthorized access to server-readable files.
The flaw allows an attacker to upload sensitive files to a Confluence page, which can then be retrieved, potentially exposing credentials or other host data.
This flaw allows an attacker to read arbitrary local files and attach them to a Jira issue by exploiting the MCP Atlassian server prior to version 0.22.0, leading to potential data exfiltration.
The flaw allows network callers to perform operations with the operator account's permissions via the HTTP MCP endpoint without proper authentication, posing a critical risk.
The flaw allows unauthenticated network callers to read files accessible to the MCP process and upload them to Jira or Confluence, posing a significant security risk.
This vulnerability allows an attacker to execute arbitrary code in the context of the current user, leading to potential full system compromise.
A stored Cross-Site Scripting (XSS) vulnerability in Adobe Experience Manager Forms JEE allows high-privileged attackers to inject malicious scripts, potentially gaining access to victim accounts or sessions.