All CVEs — page 294 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
Dell Container Storage Modules suffers from a log file information disclosure vulnerability where sensitive data gets written to log files, potentially exposing credentials or other confidential information to low-privileged attackers who can access the system remotely.
The flaw allows untrusted users to perform SQL injection attacks by submitting crafted requests through dynamic filters or joins, leading to potential data compromise, integrity issues, and system availability problems.
The flaw in Dell Container Storage Modules (CSM) Operator versions prior to 1.18.0 allows a low-privileged attacker to escalate privileges, gaining root-level access on cluster nodes, due to improper privilege management.
The flaw is a missing authentication for critical functions in Dell Container Storage Modules versions prior to 1.18.0, allowing unauthenticated attackers to gain elevated privileges. This is critical as it can lead to full system compromise.
This vulnerability allows an unauthenticated attacker to gain unauthorized access to storage backend administrator credentials, potentially leading to full control over storage arrays.
The flaw involves hard-coded credentials in Dell Container Storage Modules, allowing unauthenticated attackers to gain elevated privileges.
The flaw involves hard-coded credentials in Dell Container Storage Modules versions prior to 1.18.0, allowing unauthenticated attackers to gain access and potentially disclose sensitive information.
The flaw allows an authenticated user to inject malicious script into group document filenames, which can be executed when another group member clicks a Share link, leading to potential data access and session hijacking.
The flaw in SimpleChat allows a low-privileged user to execute arbitrary operating-system processes under the application service identity, potentially exposing or modifying secrets and disrupting the service.
Kiota's Java and PHP documentation-comment sanitizers can be exploited to inject attacker-controlled OpenAPI text, leading to potential code execution.
The flaw allows an authenticated user to execute additional commands as the Android shell user via the press_key tool, posing a risk to the security of the connected device.