All CVEs — page 271 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
A stack-based buffer overflow in VMware Workstation and Fusion's HGFS component allows a local administrator within a VM to execute arbitrary code as the VMX host process, potentially leading to full host compromise.
The flaw is an integer-overflow vulnerability in VMware Workstation and Fusion, allowing a local attacker with administrative privileges to execute code on the host. This matters because it provides a powerful attack vector for privilege escalation and remote code execution.
Candlepin's authorization filter incorrectly grants access when any one of multiple @Verify-annotated parameters is accessible, instead of requiring access to every verified entity. This allows low-privilege authenticated attackers to bypass authorization checks and access unauthorized consumer information or modify entitlements across organizations.
The vulnerability is an improper access control flaw in Langflow's vertex result caching subsystem that allows authenticated attackers to access sensitive information or inject malicious data. This affects versions 1.0.0 through 1.12.2 and could lead to unauthorized data exposure or manipulation.
A remote attacker could execute arbitrary code due to improper input validation, allowing for code injection in IBM Langflow OSS versions from 1.0.0 to 1.12.2.
A remote attacker with authentication could execute arbitrary code due to improper input validation in IBM Langflow OSS versions 1.0.0 through 1.12.2, allowing for a high impact on the system.