All CVEs — page 417 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
The flaw allows any authenticated user, even with the least-privileged role, to create and unregister MBeans without authorization, potentially leading to arbitrary code execution.
The flaw allows any authenticated user, even with the viewer role, to execute arbitrary code via JDBC commands, leading to privilege escalation to remote code execution (RCE).
The flaw allows a user with the 'manager' role to write attacker-controlled content to any file Karaf can write to, potentially granting admin privileges.
A Code Injection vulnerability in GEOVIA Geospatial Data Manager allows attackers to execute arbitrary code on the server, posing a critical risk.
The flaw allows a local unauthenticated attacker to mint OAuth tokens and access the machine-in-the-middle root certificate, posing a significant security risk.
The flaw in shell-quote's `quote()` function allows an attacker to inject shell commands by placing a line terminator within a comment, leading to Remote Code Execution (RCE).