All CVEs — page 329 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
The flaw in neuropilot allows an out-of-bounds write due to missing bounds checking, which could lead to local privilege escalation with no additional execution privileges required.
The flaw in Video HAL allows a missing bounds check, which can lead to local privilege escalation with no additional execution privileges needed.
A buffer overflow vulnerability exists in MediaTek's modem firmware (MT2716, MT2735, MT2737, and MT6813) that allows for out-of-bounds writes due to missing bounds checking. This flaw can be exploited remotely by an attacker controlling a rogue base station to escalate privileges without requiring any user interaction.
A buffer overflow vulnerability exists in MediaTek's modem firmware (MT6833, MT6835, MT6853, MT6855) that allows remote attackers to perform out-of-bounds writes when a device connects to a rogue base station. This can lead to privilege escalation without requiring any user interaction or additional execution privileges.
GitAhead's update mechanism fails to verify downloaded updates, allowing attackers to install malicious code during automatic updates. The vulnerability becomes persistent after the first SSL error, enabling continuous interception of update checks.
The flaw allows script in the Discord page to traverse paths and execute local commands, leading to potential local file system damage and unauthorized access.
Twine 2 desktop versions through 2.12.0 are vulnerable to cross-site scripting, allowing attackers to execute code as the user by crafting a malicious story file.