All CVEs — page 244 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
A local unprivileged user can exploit a link following vulnerability in Intego Antivirus's optimization module to delete arbitrary folders as SYSTEM by replacing a scanned file's directory with a junction to C:\Config.msi and leveraging Windows Installer rollback functionality.
This vulnerability allows an authenticated, low-privileged attacker to execute arbitrary commands as SYSTEM on the PDCe by injecting commands into the Active Directory Events Listener of Tenable Identity Exposure (SaaS).
This vulnerability allows remote attackers to read sensitive device information and modify configuration via an unprotected REST API, posing a significant risk to network security.
This vulnerability allows remote attackers to bypass authentication and gain full administrative control over TVU Networks Receiver/Transceiver devices by sending a crafted HTTP request to the web management login endpoint.
A flaw in gnutls v3.8.13 causes legitimate CA certificates to be incorrectly rejected, leading to denial of service when TLS connections fail. This affects systems that rely on certificate validation for secure communications.
IBM Guardium Data Protection's edge-controller service is vulnerable to a denial-of-service attack that occurs when malformed task data triggers an unchecked type assertion, causing the process to crash and terminate unexpectedly. This vulnerability affects unauthenticated remote attackers who can access the gRPC service, potentially disrupting data protection operations.
The flaw allows attackers to extract sensitive information by submitting X.509 certificates with conflicting Key Usage and Extended Key Usage settings that GnuTLS fails to properly validate. This creates a potential information disclosure vulnerability where attackers can bypass certificate validation checks.
This vulnerability allows attackers to execute arbitrary commands by injecting shell metacharacters into the image path, posing a significant risk to system security.