All CVEs — page 1113 of 1220
The complete archive, 25 per page, newest first. 30483 records. Search instead.
The flaw allows any IAM principal with lambda:InvokeFunction permission to escalate privileges and perform unauthorized AWS API operations, bypassing explicit IAM denials.
MikroTik RouterOS devices are vulnerable to a crash condition in the BGP service due to improper validation of VPN NLRI prefix lengths, allowing an unauthenticated attacker to cause indefinite BGP session disruptions without sending a NOTIFICATION message.
The vulnerability allows a low-privileged attacker to execute arbitrary code, posing a significant risk to the system's security.
The vulnerability allows for arbitrary code execution in the context of the current user, posing a significant risk to systems running Adobe Campaign Classic.
The flaw is a stack buffer overflow in Notepad++ due to unbounded string operations, which can lead to denial of service. This matters because an attacker can exploit it by providing a long settings directory path, causing the application to crash.
The flaw is a stack buffer overflow in Notepad++ due to improper handling of plugin-supplied lexers, allowing arbitrary code execution. This matters because it can lead to full compromise of the Notepad++ process context.
The vulnerability allows for arbitrary code execution in the context of the current user, posing a significant risk to systems running Adobe Campaign Classic.
The vulnerability allows an attacker to forge server-side requests, potentially leading to privilege escalation without user interaction. This flaw is critical as it can be exploited to gain unauthorized access to sensitive systems.
The vulnerability allows a low-privileged attacker to exploit Server-Side Request Forgery (SSRF) to gain elevated access, potentially leading to privilege escalation.
The vulnerability allows a low-privileged attacker to exploit Server-Side Request Forgery (SSRF) to gain elevated access, potentially leading to privilege escalation.
The vulnerability allows a low-privileged attacker to bypass security measures and gain unauthorized read and limited write access through SQL injection, potentially leading to a security feature bypass.
This vulnerability allows an attacker to execute arbitrary code by injecting malicious SQL commands, posing a significant risk to the system's security.
The flaw is an SQL Injection vulnerability in Adobe Campaign Classic that allows arbitrary code execution, posing a critical risk due to high privileges required for exploitation.
The flaw is an Improper Input Validation vulnerability in Adobe Campaign Classic that allows a low-privileged attacker to execute arbitrary code, posing a critical risk.
The flaw is an Improper Input Validation vulnerability in Adobe Campaign Classic that allows a low-privileged attacker to execute arbitrary code, posing a significant security risk.