All CVEs — page 1173 of 1220
The complete archive, 25 per page, newest first. 30483 records. Search instead.
The flaw allows an attacker to inject arbitrary file paths and connection strings, leading to arbitrary file creation and overwrite, and potential credential theft.
The flaw allows an attacker to bypass authentication by setting a specific HTTP header, enabling unauthorized access to administrative functions.
This flaw allows an attacker to sign a record with their own key and include a victim's peer ID, potentially causing address-book corruption and reachability issues.
The flaw allows unauthenticated attackers to bypass validation and execute arbitrary PHP code by submitting crafted serialized PHP objects via POST requests.
The Dell Server Update Utility prior to 26.07.01 has an Uncontrolled Search Path Element vulnerability, allowing a low-privileged local attacker to execute arbitrary code.