All CVEs — page 410 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
This vulnerability allows unauthenticated attackers to inject arbitrary SQL queries, potentially leading to data theft or server compromise.
The flaw allows an authenticated user to inject arbitrary commands by exploiting a vulnerability in the Mercurial backend of Weblate, leading to potential command execution with the service account privileges.
The flaw allows an attacker to cause an integer overflow by manipulating tensor dimensions in a YAML configuration file, leading to potential denial of service, information disclosure, and data tampering.
A signed integer overflow in the compress library's s2.NewDict() function allows attackers to craft malicious dictionaries that trigger out-of-bounds memory access during compression operations. This vulnerability can lead to process crashes and potentially enable further exploitation through SIGSEGV crashes.
The flaw in CTranslate2 before 4.8.1 allows attackers to cause heap-based buffer overflows by crafting malicious model files, potentially leading to crashes or arbitrary code execution.
The Seeyon A6 platform has an unauthenticated SQL injection vulnerability in its file download endpoint that allows attackers to extract database contents without needing any credentials. This flaw enables remote data extraction including sensitive system information and credentials.
This flaw allows an authenticated user to redirect server-side storage traffic to an untrusted endpoint, potentially exposing sensitive authentication material.
The DetaWix Mobile Web Portal has a vulnerability where sensitive information is being inserted into sent data without proper access controls, allowing users to access functionality they shouldn't be able to reach. This creates a potential for unauthorized access to restricted features and data.