All CVEs — page 296 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
A heap buffer overflow vulnerability exists in libmikmod before version 3.3.14, where crafted track counts in DSM modules can cause integer overflow leading to memory corruption. This allows attackers to potentially crash systems or execute arbitrary code.
The flaw allows for the execution of shell commands on an Android device through unvalidated input, posing a significant security risk.
Smarty template engine contains a code injection vulnerability where forged nocache_hash markers can be copied verbatim into PHP cache files, enabling remote code execution through arbitrary PHP code execution on include. This affects versions before 4.5.8 and 5.x before 5.8.5.
This flaw allows an attacker to bypass mitigation controls in the File Handling component, leading to potential high impact on the system, including data loss, system compromise, and unauthorized access.
The flaw allows authenticated users to execute arbitrary code via the Control Panel, posing a significant security risk.
The Linux kernel's XFRM subsystem has a missing RCU read lock and reference counting in the xfrm_trans_reinject() function, causing potential data races and RCU lockdep warnings when reinjecting transport-mode packets through workqueue context. This can lead to system instability and incorrect packet handling.