All CVEs — page 391 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
The flaw is an out-of-bounds write vulnerability in Pgpool-II that could allow an authenticated attacker to cause abnormal process termination or execute arbitrary code. This matters because it can lead to significant system compromise and data loss.
The WordPress Motors plugin contains a time-based blind SQL injection vulnerability in the 'stm_lat/stm_lng' parameter that allows unauthenticated attackers to extract database information without needing any credentials.
This vulnerability allows for authentication bypass due to improper validation of unsafe equivalence in input, impacting GiveWP versions from n/a through 4.16.9.
The Simply Schedule Appointments WordPress plugin has a local file inclusion vulnerability that allows authenticated users with subscriber-level access or higher to include and execute arbitrary PHP files on the server. This flaw can lead to complete code execution and data compromise.
The flaw allows unauthenticated attackers to upload a malicious JavaScript file, which can be executed in the browser of any user who opens it, leading to potential remote code execution.