All CVEs — page 354 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
The flaw allows a remote attacker to bypass authorization by manipulating object identifiers, potentially overwriting critical control files of other users.
The vulnerability allows an unauthenticated or unauthorized user to overwrite metadata and spine content of existing books, posing a significant risk to data integrity.
The flaw allows attackers to write files outside the intended project workspace, potentially compromising the entire server through path traversal.
The Devika v1.0 Patcher Agent has a path traversal vulnerability in its save_code_to_project function that allows attackers to write files outside the intended project workspace, potentially leading to arbitrary file creation and code execution.
Devika v1.0 allows attackers to write files outside the intended project workspace through a directory traversal vulnerability, enabling unauthorized file manipulation.
The flaw allows unauthenticated attackers to retrieve sensitive metadata and delete arbitrary files, compromising content integrity and uploader privacy.
The Amazon Ion Python library contains a flaw in its Ion reader that can lead to uncontrolled recursion when processing deeply nested Ion values, potentially causing application crashes and denial of service. This vulnerability affects applications using the library without requiring authentication or user interaction.