All CVEs — page 418 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
This vulnerability allows for remote command injection through the manipulation of the sid argument in the network_tools CGI component, leading to potential remote code execution.
Bitwarden Server suffers from a silent truncation vulnerability where SSO identifiers longer than 50 characters are silently truncated to 50 characters, allowing attackers to impersonate legitimate users by using a partial identifier match. This creates a high-impact authentication bypass that can lead to full account access.
This vulnerability allows for improper privilege management, enabling remote attackers to manipulate the sudo configuration, potentially leading to unauthorized access and execution of commands with elevated privileges.
The flaw is a stack-based buffer overflow in the _tWlanTask function of the MmtAtePrase Parser component, allowing local network attackers to execute arbitrary code. This is critical due to the high severity and potential for remote code execution.