All CVEs — page 248 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
This vulnerability allows object injection through deserialization of untrusted data, leading to potential remote code execution.
Obsidian Desktop before 1.14.0 has a vulnerability where attackers can bypass URL filtering in MathJax to execute arbitrary OS commands through crafted notes with malicious MathJax formulas. This allows remote code execution as the desktop user.
Obsidian Desktop allows remote code execution through malicious Markdown notes that exploit insufficient sanitization of iframe attributes, enabling attackers to execute arbitrary OS commands when victims open vulnerable notes and start presentations.
wolfSSL's ConfirmNameConstraints() function incorrectly rejects valid certificates without Subject Alternative Names (SANs) when processing crafted CA certificates, leading to denial of service in TLS clients that use wolfSSL.
The flaw allows unauthenticated attackers to execute arbitrary SQL commands, potentially leading to remote code execution with DBA/sysadmin privileges.
The flaw in SGLang allows arbitrary code execution due to untrusted PickleWrapper payloads being deserialized without proper validation or authentication, making it a critical vulnerability.
The insights-operator-gather ClusterRole grants excessive read permissions on all secrets across all namespaces without any restrictions. This allows an attacker who can spawn a pod using this service account to access every secret in the cluster, potentially exposing sensitive credentials and configuration data.
This flaw allows a buffer overflow, which can lead to remote code execution or denial of service. It affects multiple versions of IBM DataPower Gateway and is critical due to the potential for severe impact.
IBM DataPower Gateway suffers from XML external entity injection (XXE) vulnerability that allows remote attackers to access sensitive information and consume memory resources by processing malicious XML data.
A heap-based buffer overflow in IBM DataPower Gateway allows remote attackers to execute arbitrary code with high severity impact. This vulnerability affects multiple versions of the gateway and could lead to complete system compromise.