All CVEs — page 292 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
ImageSharp's TIFF CCITT Group 3 encoder has a buffer overflow vulnerability that can lead to arbitrary code execution when processing narrow 1-bit images. This affects versions 2.0.0 through 4.1.2 and allows attackers to corrupt memory and terminate processes.
This vulnerability allows a low-privileged attacker to inject OS commands, leading to potential remote code execution. It matters because it can be exploited to gain full control over the system.
LogicalDOC Enterprise contains a blind SQL injection vulnerability in its WorkflowsDataServlet component that allows authenticated users to manipulate underlying SQL queries through crafted workflow template names, potentially leading to unauthorized data access and manipulation.
The kkFileView application has a directory traversal vulnerability that allows unauthenticated attackers to write files outside the intended upload directory. This means an attacker can potentially place malicious files anywhere on the server filesystem, leading to arbitrary code execution or data compromise.
The flaw allows for Remote Code Execution (RCE) through a Kotlin DSL sandbox escape in JetBrains TeamCity versions prior to 2026.1.3, 2025.11.7, posing a significant security risk.
The flaw allows an attacker to inject executable markup by manipulating metadata, potentially leading to code execution or data exfiltration.
An authenticated user can manipulate file cleanup processes to delete unintended files outside the upload directory, leading to data loss or service disruption. This vulnerability affects headless CMS systems before versions 3.90.0 and 4.0.0-canary.34.
The flaw allows attackers to upload malicious SVG files that bypass sanitization and execute JavaScript when downloaded, posing a high risk to users.