All CVEs — page 331 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
This vulnerability allows attackers to retrieve sensitive data that was embedded in sent information, potentially exposing confidential details through the Cost Calculator Builder plugin. This is a high-severity issue that could lead to data exposure without requiring any authentication or user interaction.
This vulnerability allows for Blind SQL Injection, enabling attackers to extract data from the database by manipulating SQL queries.
The flaw in CoCart WordPress plugin before 4.9.7 allows an attacker to perform a cross-site request forgery (CSRF) attack, creating a new administrator account using a logged-in administrator's session, due to the lack of REST API authentication scope.
The vulnerability in InternLM MindSearch 0.1.0 allows remote code execution due to improper input handling, posing a critical risk.
A flaw in Ahsay AhsayCBS up to 10.3.2 allows for os command injection via manipulation of the 'random' argument, leading to potential remote code execution.