All CVEs — page 397 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
The vulnerability allows for code execution via the internal MCP inspector proxy endpoint, posing a critical risk due to the high severity and potential for remote exploitation.
This vulnerability allows an attacker to access and execute private MCP tools of another tenant by exploiting an insecure direct object reference in the session management.
The SQL injection vulnerability in bytebase dbhub v1.2.0 allows attackers to access sensitive database information via a crafted SQL statement, posing a critical risk.
This flaw allows a local attacker to execute arbitrary code by exploiting the permission/allow-everything endpoint in Kilo Code versions before v7.4.1, posing a significant risk.
This vulnerability allows unauthenticated attackers to bypass network access controls via the API endpoint of HPE Networking Instant ON, granting unauthorized access to restricted networks.
This vulnerability allows an unauthenticated attacker to bypass security controls and potentially execute remote code with elevated privileges, posing a significant risk to network security.
A command injection vulnerability allows unauthenticated attackers to execute arbitrary commands as a privileged user, potentially leading to full system compromise.
A buffer overflow vulnerability exists in HPE Networking Instant ON APS, allowing unauthenticated adjacent attackers to achieve remote code execution.
Uncontrolled format string vulnerabilities in HPE Networking Instant ON APs allow unauthenticated attackers to execute arbitrary commands, potentially leading to Denial-of-service or remote code execution.