All CVEs — page 381 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
A vulnerability allowed project administrators to read comments from other projects via notification templates, posing a high risk due to potential data exposure.
A missing authorization flaw allowed authenticated users to send arbitrary emails from the server's trusted address, potentially leading to unauthorized communication or phishing attacks.
A missing authorization flaw in JetBrains YouTrack before 2026.2.18991 allowed read-only users to overwrite project notification templates, compromising the integrity of project settings.
The flaw allows remote code execution via Structural Search script constraints in untrusted projects, posing a significant security risk.
A flaw in JetBrains TeamCity allowed administrators to take over accounts via password reset, posing a high risk to system security.
This flaw allows authenticated users to execute commands on Windows servers through CRLF injection in Pipeline Git connection settings, posing a significant risk due to remote code execution capabilities.
The flaw allows sandbox escape leading to code execution in JetBrains TeamCity versions before 2026.2, 2026.1.4, and 2025.11.8, due to vulnerabilities in the versioned settings Kotlin DSL.
The flaw is an unauthenticated SQL injection vulnerability in the Joomla Extension joomcode.com, specifically in the JCTables 1.21.1 version, allowing attackers to execute arbitrary SQL queries and potentially read or write data without proper authentication.
This vulnerability allows for Blind SQL Injection, enabling an attacker to extract data from the database by observing time delays or other indirect responses.
The AJA HELO Plus firmware contains a static AES passphrase that can be reverse-engineered from the firmware image, allowing attackers to decrypt sensitive diagnostics bundles without authentication. This exposes highly sensitive server information through an unauthenticated diagnostics endpoint.
A critical function in Trex MES is vulnerable to authentication bypass, allowing unauthorized access to sensitive operations.
This vulnerability allows for SQL injection, enabling an attacker to execute arbitrary commands through the SQL interface, leading to potential data theft, system compromise, and unauthorized access.
The flaw allows attackers to read and write files in arbitrary directories outside the configured save locations by manipulating save paths in the manifest request handler, posing a significant security risk.