All CVEs — page 1139 of 1220
The complete archive, 25 per page, newest first. 30483 records. Search instead.
The flaw is a heap-based buffer overflow in the Kamailio CDP Diameter Receiver module, which can be exploited to launch remote attacks. This matters because it allows attackers to execute arbitrary code or cause a denial of service.
The SmartLife app generates authentication parameters dynamically, allowing an attacker to call the backend interface to obtain account IDs and reset passwords, posing a significant security risk.
This flaw in Suricata before 8.0.7 involves a use-after-free vulnerability in the Http2ThreadMultiBuf handling, which can lead to potential memory corruption if exploited.
This flaw in Suricata before 8.0.7 involves a DoH2 type confusion that can lead to an invalid free operation, impacting system stability and security.
This vulnerability allows remote command injection through manipulation of the NTPServer argument, enabling attackers to execute arbitrary commands on the device.
Mistral Vibe before 2.25.5 allows attackers to execute arbitrary shell commands by supplying a repository with a crafted post-checkout hook, leading to remote code execution.
Gopeed through 2.0.0-beta.3 allows attackers to write arbitrary files outside the extraction directory via path traversal in archive extraction, posing a significant security risk.
The flaw allows attackers with namespace-scoped list permissions to bypass authorization and retrieve archived workflows from all other namespaces, exposing sensitive information.