All CVEs — page 395 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
This vulnerability allows for command injection through the manipulation of the 'url' argument in the '/api/ZRnetwork/ping' endpoint, leading to potential remote code execution.
This vulnerability allows remote command injection through the manipulation of the hostname/zonename argument in the set_time_zone function of Ziroom ZHOME A0101 1.0.1.0, enabling potential attackers to execute arbitrary commands on the system.
The flaw is an XML injection vulnerability in the Mediawiki - EasyTimeline extension, allowing attackers to inject malicious XML content. This matters because it can lead to arbitrary code execution, data theft, and service disruption.
The anchorme library contains a vulnerable regular expression that can be exploited through catastrophic backtracking when processing IPv6 host addresses, causing the Node.js event loop to block and deny service to other requests.
LightLLM's NCCL control channel allows unauthenticated attackers to exhaust worker memory by storing unlimited key-value pairs without size limits, leading to process crashes and node failures.
LightLLM through 1.2.0 allows unauthenticated attackers to execute arbitrary code via RPyC cache service with pickle deserialization enabled.
LightLLM versions through 1.2.0 are vulnerable to remote code execution due to an unauthenticated RPyC server with pickle deserialization enabled, allowing attackers to execute arbitrary code via crafted serialized objects.
The vulnerability allows for command injection through the manipulation of the conloglevel/log_size argument in the set_syslog function, enabling remote attackers to execute arbitrary commands.
The device's update mechanism has a critical flaw where it accepts unsigned packages as authentic due to disabled signature verification and a publicly exposed production private key that allows attackers to forge valid signatures. This vulnerability enables arbitrary code execution with root privileges during package installation.
The device stores unencrypted HTTP update metadata that gets injected directly into HTML responses, creating a cross-site scripting vulnerability. An attacker who can influence update metadata can execute arbitrary code with root privileges through a command execution interface.
The flaw is a use-after-free vulnerability in U-Boot's lwIP wget implementation, which can lead to a crash of the bootloader if exploited.
The flaw in U-Boot allows a malicious NFS server to cause a buffer overflow by sending crafted READLINK replies, potentially crashing the bootloader.
This flaw involves a buffer overflow in U-Boot's nfs_read_reply() function, allowing attackers to corrupt memory by supplying crafted NFS READ reply lengths. This can lead to crashes or memory corruption in the bootloader.
This vulnerability allows attackers to inject time-based SQL queries, potentially leading to data exfiltration or system compromise.
The flaw is a time-based blind SQL injection vulnerability in the 'reportType' parameter, allowing attackers to inject malicious SQL queries and potentially gain unauthorized access or manipulate data. This matters because it can lead to severe data breaches and system compromise.
The flaw in U-Boot allows remote attackers to send crafted IP fragments to crash the bootloader due to an out-of-bounds write vulnerability.