All CVEs — page 392 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
The Robin Image Optimizer WordPress plugin has a cross-site scripting vulnerability where unescaped HTML values are re-emitted into element attributes, allowing attackers to inject malicious scripts that execute in users' browsers when viewing affected pages. This affects all users who view pages with optimized images, including administrators.
The flaw allows unauthenticated users to upload SVG files that can execute arbitrary code on the server, posing a significant security risk.
The Zella Theme WordPress theme before 2.6.3 allows unauthenticated users to upload arbitrary files, including PHP ones, leading to remote code execution.
This flaw allows an out-of-bounds write with arbitrary data when using attacker-controlled regular expressions and certain JIT API usage in PCRE2 before 10.49, posing a high risk due to potential data corruption or execution of arbitrary code.
This flaw allows a remote attacker to execute code on a Pexip Infinity Conferencing Node, leading to potential unauthorized access and control of the system.
The flaw allows os command injection via manipulation of the url argument, enabling remote code execution.