All CVEs — page 279 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
This flaw allows an attacker to bypass authorization and intercept data streams from other tenants in the same Kibana deployment, leading to unauthorized data disclosure and modification.
A memory corruption vulnerability in Arista Wi-Fi access points allows unauthenticated attackers on the same network segment to crash the sensor service or potentially achieve remote code execution. This represents a significant security risk as it could lead to complete device compromise and potential network infiltration.
Arista Wi-Fi access points are vulnerable to a heap-based buffer overflow in their capture service that can be triggered by sending a crafted packet from an unauthenticated network attacker. This flaw can lead to service crashes or potentially allow remote code execution, making it a significant security risk for wireless infrastructure.
The flaw allows an unauthenticated attacker to crash the sensor service on Arista access points with WIPS active, potentially leading to the disabling of WIPS monitoring or remote code execution.
This vulnerability allows an unauthenticated attacker to trigger a stack overflow in the wireless gateway service, leading to a denial-of-service condition or potentially executing arbitrary code on the device.
This vulnerability allows unauthenticated attackers to forge their source IP address and gain administrative access to the CV-CUE backend, posing a significant security risk.
The flaw is an access-control issue in the CV-CUE backend that allows unauthenticated attackers to access internal services, potentially exposing sensitive information or disrupting services.
An XML External Entity (XXE) vulnerability in Spectralight's WiFi-server allows authenticated users to read arbitrary local files and cause partial denial of service by crafting malicious XML requests.
A stored XSS vulnerability in the Fileserver upload API allows authenticated attackers with file upload privileges to inject malicious scripts that execute in other users' browsers. This could lead to session hijacking and full account compromise.
This vulnerability allows an attacker to inject malicious content that can be executed in the context of an authenticated user, potentially compromising their session and accessing sensitive data.
A stored XSS vulnerability allows authenticated administrators with high privileges to inject malicious scripts into configuration settings that execute in other users' browsers when they view or compare those configurations. This enables attackers to hijack user sessions and access sensitive data.
This vulnerability allows an authenticated attacker with specific permissions to read or write files outside their intended scope, potentially leading to unauthorized access or data manipulation.
A path traversal vulnerability in CloudVision Portal/Sensor allows authenticated users with high privileges to access unintended files and data on the sensor system. This represents a significant data exposure risk as attackers can extract sensitive information from the affected systems.