All CVEs — page 360 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
The WP Full Stripe Free plugin has a broken access control vulnerability that allows unauthenticated users to perform actions they shouldn't be able to, potentially leading to unauthorized data modifications or system compromise.
This flaw allows unauthenticated attackers to inject SQL commands, potentially leading to data theft or corruption in WordPress File Upload versions up to 5.1.10.
This flaw allows unauthenticated users to escalate privileges in Authorizer versions up to 3.15.3, enabling complete control over the system.
This flaw allows subscribers to escalate their privileges, potentially leading to unauthorized access and control over the system. It matters because it can be exploited by malicious actors to gain higher permissions without proper authorization.
An unauthenticated IDOR vulnerability allows attackers to access photo review data that should be restricted, potentially leading to unauthorized access to sensitive user-generated content and review information.
An unauthenticated IDOR vulnerability allows attackers to access REST API logs without authentication, potentially exposing sensitive operational data. This affects versions 1.7.2 and earlier.
A local file inclusion vulnerability in Sharp and Toshiba Tec multifunction printers allows remote attackers to read arbitrary files without authentication by manipulating the path parameter in the installed_emanual_down.html endpoint. This flaw can expose sensitive system files like /etc/passwd and coredump files containing credentials.
The flaw in BoKS keytab management allows attackers to predict and verify service-account passwords, posing a significant security risk.
The flaw in iControl allows attackers to exploit missing authentication checks or insecure direct object references, leading to privilege escalation and unauthorized modification or deletion of sensitive data.
Imager Perl library crashes when reading raw image files with invalid channel count values, causing process termination without exception handling. This allows attackers to trigger uncatchable exits that can be leveraged for DoS attacks.