All CVEs — page 1150 of 1220
The complete archive, 25 per page, newest first. 30483 records. Search instead.
The flaw in Cocos AI allows a relying party to be induced to trust an unintended attestation context due to the lack of attestation freshness enforcement.
The flaw in Cocos AI allows a relying party to accept a TDX QuoteV4 Evidence with mismatched or reused reportData, enabling session-misbinding and potential unauthorized access to application data.
The flaw allows a crafted legacy DOC file to inject unsafe URL schemes, leading to potential script execution in the embedding application's origin.
SysReptor Professional allows authenticated users to upload image files that can execute arbitrary code due to improper handling of Ghostscript and GnuPG, leading to Remote Code Execution (RCE) with the application's privileges.
The flaw allows an unauthenticated attacker to exploit a misconfiguration in the password reset feature to take over a victim's account.
Authenticated non-admin users could influence file paths, potentially allowing unauthorized file placement or overwrite with application privileges.