All CVEs — page 1116 of 1220
The complete archive, 25 per page, newest first. 30483 records. Search instead.
This vulnerability allows a low-privileged user to execute commands with SYSTEM privileges during Netdata Windows Agent MSI repair, potentially leading to full system compromise.
The flaw involves a heap out-of-bounds write vulnerability in the Linux kernel's RPC-over-RDMA server, which can lead to a kernel heap overflow and potential code execution.
Aureus ERP before 1.5.0 allows authenticated users to access arbitrary messages by submitting sequential message IDs, leading to unauthorized access and potential data exposure.
The Concrete CMS Community Store has a predictable token generation flaw where download tokens are based on timestamps instead of random values, allowing attackers to calculate valid tokens for other customers' digital products.
The rpcbind service suffers from a memory exhaustion vulnerability where unbounded in-memory lists grow continuously with each unique RPC request, leading to DoS conditions that can exhaust system resources and degrade service availability.