All CVEs — page 1179 of 1220
The complete archive, 25 per page, newest first. 30483 records. Search instead.
AVideo LoginControl has an authentication bypass vulnerability due to loose equality comparison against an uninitialized session variable, allowing attackers with a victim's password to bypass the second factor.
A vulnerability exists in the Username input handling of the Quick Security Setup Handler, allowing remote attackers to exploit improper input validation, leading to potential system compromise.
This flaw is a stack-based buffer overflow in the /usr/sbin/auth_user_pass script, allowing unauthenticated attackers to potentially execute arbitrary code as root via a crafted authentication request.
The flaw is an OS command injection vulnerability in the xtremed daemon, allowing unauthenticated remote attackers to execute arbitrary commands as root via the AuthFormServlet endpoint.
This vulnerability allows an unauthenticated attacker to exploit a hard-coded cryptographic key, leading to unauthorized access to Dell OpenManage Server Administrator versions prior to 11.1.0.3.
This vulnerability allows unauthenticated attackers to inject OS commands, potentially leading to remote code execution. It matters because it can be exploited to gain full control over the affected system without any authentication.
This vulnerability allows unauthenticated attackers to remotely execute code, posing a significant risk to server security.
This flaw allows unsanitized user input to be executed as SQL statements, enabling attackers to perform arbitrary actions within the victim's Snowflake session.
The flaw is a Heap-based Buffer Overflow vulnerability in Dell OpenManage Server Administrator versions prior to 11.1.0.3, allowing a low-privileged local attacker to potentially gain elevated privileges. This matters because it can lead to unauthorized access and control over the system.