All CVEs — page 277 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
This vulnerability allows unauthenticated attackers to execute arbitrary code on the affected HPE Networking ClearPass Policy Manager web interface by deserializing untrusted data, posing a critical risk.
The vulnerability allows a read-only user to escalate privileges to administrative access, which could lead to unauthorized control of the system.
A buffer overflow vulnerability exists in AOS-S, allowing unauthenticated remote attackers to expose sensitive memory contents and cause a denial of service.
A buffer overflow vulnerability in AOS-S allows unauthenticated adjacent attackers to expose sensitive memory contents and cause a denial of service, posing a significant risk to networked devices.
AOS-S is vulnerable to memory corruption issues that can be exploited by an unauthenticated adjacent attacker to execute arbitrary code, posing a significant risk.
A buffer overflow vulnerability exists in AOS-S, allowing unauthenticated remote attackers to execute arbitrary code.
A vulnerability in AOS-S management interface allows unauthenticated attackers to bypass authentication if specific preconditions are met, potentially leading to unauthorized access.
A vulnerability allows unauthenticated attackers to bypass authentication in the web management interface of AOS-S, granting them unauthorized access to the system.
The flaw allows an attacker to bypass passkey verification during OAuth2 and OpenID Connect sign-in, gaining full session access. This is critical as it undermines multi-factor authentication (MFA) and can lead to full account compromise.
Gitea's repository migration feature fails to protect against DNS rebinding attacks where an attacker can manipulate DNS resolution between hostname validation and actual Git connection, potentially allowing access to internally blocked repositories. This creates a window where validated external hostnames can be redirected to internal addresses that would otherwise be blocked.
This flaw allows attackers to inject JavaScript code into Handlebars templates, leading to remote code execution. It matters because it can be exploited to gain unauthorized access and control over the server process.