All CVEs — page 408 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
The flaw in libsoup allows remote peers to cause heap corruption or crashes by sending fragmented WebSocket messages that exceed buffer size limits, potentially leading to denial of service or more severe issues.
The flaw in libsoup allows heap corruption or a crash when handling a crafted WebSocket Pong frame, due to the emission of a ::pong signal with a GByteArray pointer instead of GBytes.
The Wikimedia Foundation's MediaWiki CentralAuth extension had a vulnerability that exposed sensitive user authentication data to unauthorized actors. This flaw allowed attackers to access confidential information about user accounts without requiring authentication or specific privileges.
This vulnerability allows attackers to consume excessive system resources through the DataTransfer extension in MediaWiki, potentially leading to denial of service. The flaw occurs when the extension processes data transfers without proper resource limits, making it easy for an attacker to exhaust server resources.
The Wikimedia Foundation Mediawiki EventBus Extension has a vulnerability that exposes sensitive information to unauthorized actors. This occurs when the extension fails to properly protect sensitive data, allowing attackers to access information they shouldn't be able to see.
A missing authorization vulnerability allows unauthorized access to functionality not properly constrained by ACLs in the Mediawiki TemplateSandbox Extension.
Akaunting before 2.1.31 allows authenticated admin users to inject shell commands, leading to potential server compromise.
This vulnerability allows an authenticated attacker to bypass user-configured permission settings in TeamViewer, potentially leading to unauthorized actions and remote code execution.