All CVEs — page 1145 of 1220
The complete archive, 25 per page, newest first. 30483 records. Search instead.
The flaw allows unauthenticated attackers to predict password recovery tokens, enabling them to reset any user's password, including administrators, by leveraging the predictable nature of the tokens generated from the microtime() function.
LightLLM through 1.2.0 allows unauthenticated attackers to register arbitrary nodes via the /pd_register WebSocket endpoint, leading to potential full user prompt disclosure, denial of service, or internal network request issues.
The flaw allows attackers to upload arbitrary files, leading to potential remote code execution, due to missing capability checks and lack of file validation.
This flaw allows a remote attacker to bypass security restrictions in IBM Guardium Data Protection 12.2 due to improper authorization, posing a significant risk to data security.
IBM Guardium Data Protection 12.2 contains a SQL injection vulnerability that allows authenticated attackers to extract sensitive information from the database by manipulating SQL commands. This represents a significant data exposure risk since Guardium is designed to protect sensitive data.
The flaw allows a remote attacker to execute arbitrary code due to improper input handling, posing a significant security risk.
The flaw allows a remote authenticated attacker to execute arbitrary code, posing a significant risk due to improper input handling in web page generation.
This flaw allows a remote authenticated attacker to obtain sensitive information due to improper handling of SQL commands, posing a high risk to data security.
The flaw allows a local attacker to gain elevated privileges due to improper privilege management, which could lead to unauthorized access and data compromise.
This flaw allows a remote attacker to execute arbitrary OS commands, posing a significant risk to system security.
This vulnerability allows a remote attacker to bypass security restrictions by exploiting a cross-site request forgery (CSRF) flaw in IBM Guardium Data Protection 12.2, potentially leading to unauthorized access or data manipulation.