All CVEs — page 1118 of 1220
The complete archive, 25 per page, newest first. 30483 records. Search instead.
The flaw allows authenticated viewers to access sensitive API endpoints, potentially exposing camera credentials and internal network details.
The flaw allows any authenticated viewer to send admin-only WebSocket messages, potentially causing service restarts or disabling security monitoring functions.
The flaw allows for the execution of arbitrary classes via unsafe reflection, potentially leading to the execution of static initializer blocks in arbitrary classes present in the classpath.
This vulnerability allows unauthenticated attackers to perform remote code execution when a BIG-IP APM access policy and an OAuth profile are configured on a virtual server, leading to potential system compromise.
The vulnerability allows unauthenticated attackers to execute arbitrary code by exploiting the unvalidated handling of multipart messages in the DiffusionServer.
The FasterXML jackson-core library has a vulnerability in its NumberInput.looksLikeValidNumber() method that causes quadratic time complexity when processing stringified numbers. This allows attackers to perform a denial-of-service attack by submitting large numeric strings that trigger expensive regex backtracking, potentially exhausting server resources.
This vulnerability allows an attacker to disclose information via a remote unauthenticated attack on Fortinet FortiPAM Chrome Extension versions 8.0 and 7.4, due to improper restriction of rendered UI layers or frames.