All CVEs — page 246 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
This flaw involves improper certificate validation in gnutls v3.8.13, allowing attackers to exploit invalid certificate extensions, potentially leading to unauthorized access or data compromise.
The flaw is an improper certificate validation issue in GnuTLS v3.8.13 that causes legitimate certificates to be rejected, leading to denial of service for valid users. This affects applications using GnuTLS for secure communications.
A path traversal vulnerability in datamodel-code-generator allows attackers to write ProtoBuf schema files outside of designated directories, potentially creating or overwriting files with proto syntax declarations. This could lead to persistent modifications in the target system's file structure.
The webonyx graphql-php library has a recursive descent parser without recursion limits, allowing attackers to trigger stack exhaustion through deeply nested GraphQL queries that cause SIGSEGV and terminate PHP processes. This affects PHP-FPM workers and long-running processes.
This flaw allows an attacker to inject SQL commands via the sort request parameter, leading to potential data theft, modification, or deletion.