All CVEs — page 405 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
This flaw involves improper input validation in Google Chrome's Themes, allowing a remote attacker to execute arbitrary code via crafted network traffic, potentially leading to full system compromise.
This flaw involves improper output encoding in DevTools of Google Chrome, allowing a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.
The vulnerability allows for a stack-based buffer overflow through the web management interface, enabling potential remote code execution or data corruption.
The flaw allows an authenticated remote attacker to perform path traversal and delete arbitrary files via the Datasource REST component, potentially leading to denial of service or system integrity issues.
IBM Guardium Data Protection 12.2 contains a command injection vulnerability in its SNMP alert notification functionality that allows authenticated attackers to execute arbitrary commands as root. This represents a critical escalation path from a user with policy alert privileges to full system compromise.
The flaw allows a privileged authenticated user to execute arbitrary commands with root privileges through the certificate export CLI functionality, posing a significant risk.
A remote attacker could execute arbitrary code by exploiting improper path validation during archive extraction in IBM DataStage on Cloud Pak for Data 5.4.0.0, posing a significant security risk.
This flaw allows a local attacker to change file ownership, potentially leading to unauthorized access or data manipulation.
Marmite's development server has critical missing authentication on key endpoints, allowing attackers to modify site content and configuration without any credentials. This creates a high-risk scenario where unauthenticated users can manipulate application data and settings.
Marmite's development server is vulnerable to path traversal attacks that allow unauthenticated users to read arbitrary files on the server. This occurs because the server fails to properly validate path segments after percent-decoding, enabling attackers to access files beyond the intended directory.
The vulnerability is a buffer over-read in NetX Secure's ASN.1 parsing function that occurs when processing X.509 certificates during TLS handshakes. This flaw allows an attacker to read beyond the end of a buffer before checking if sufficient data remains, potentially leading to information disclosure or denial of service.