All CVEs — page 1152 of 1220
The complete archive, 25 per page, newest first. 30483 records. Search instead.
Authenticated users can modify their own account_role and account_id, and an authenticated non-member can read another tenant's knowledge-base chunks, potentially leading to unauthorized access and data modification.
WACRM versions 0.7.0 and earlier allow unauthorized users to modify and delete flows and create active automations, bypassing role-based security.
The flaw allows a remote attacker with a bearer token limited to pull and push actions to delete manifests and blobs within the token's repository scope, making images unavailable and altering repository history.
The flaw in Rsyslog involves a stack buffer overflow due to improper handling of structured-data parameters, which can lead to a crash or interruption of log collection.
The flaw allows local access to host services and other ToolHive-managed MCP proxies due to lack of network isolation, posing a high risk of data exposure and service disruption.
The flaw in virtio-win's Viosock driver allows a low-privilege local process to overflow a 32-bit sum, leading to kernel memory corruption and potential privilege escalation.