All CVEs — page 305 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
The Linux kernel's TTM (Translation Table Manager) module has a bug where swapped-out resources remain within their bulk_move range and are not properly removed from the LRU list, leading to use-after-free conditions when these resources are eventually freed or moved. This vulnerability can cause system instability and potentially allow privilege escalation.
The SMS Alert Order Notifications plugin has an incorrect privilege assignment vulnerability that allows unauthenticated users to escalate privileges and gain administrative access. This means attackers can potentially take full control of affected systems without needing valid credentials.
The flaw allows unauthorized access to protected resources due to broken access control, impacting subscriber data in Progress Planner versions up to 1.10.0.
The Sermon'e plugin has a broken access control vulnerability that allows unauthenticated users to access restricted administrative functions, potentially leading to unauthorized data exposure or modification.
The flaw allows attackers to bypass authorization checks in Easy Digital Downloads, enabling them to perform actions they shouldn't be able to, such as modifying or deleting downloads without proper access rights. This represents a significant security gap where the application fails to verify user permissions correctly.
This flaw allows unauthenticated attackers to inject SQL commands, potentially leading to data theft or corruption.
A SQL injection vulnerability in UDesign Core plugin allows authenticated attackers to execute arbitrary SQL commands against the WordPress database, potentially leading to full database compromise and unauthorized access to sensitive user data.
This flaw allows unauthenticated attackers to inject SQL commands, potentially leading to data theft or corruption in websites using the Porto Theme version 3.9.3 or earlier.
A SQL injection vulnerability in ListingPro allows authenticated attackers to execute arbitrary SQL commands against the database, potentially leading to full database compromise and data exposure. This affects versions up to 2.9.12.