All CVEs — page 421 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
The flaw in PyJWT allows attackers to forge authenticated HMAC tokens by supplying a mutated public-key PEM as raw key bytes, leading to unauthorized access.
This vulnerability allows for command injection through the manipulation of the path argument in the pop_usb_device function, enabling remote attackers to execute arbitrary commands.
The vulnerability allows an attacker to bypass signature verification, leading to potential unauthorized access or manipulation of data.
LiteLLM has a weak authentication vulnerability allowing attackers with a valid JWT to authenticate as any user by exploiting an email-based fallback in the JWT flow, potentially gaining administrative privileges.
The ConvertPlus plugin for WordPress is vulnerable to Deserialization of Untrusted Data, allowing authenticated attackers with Subscriber-level access to inject a PHP object, potentially leading to RCE if a POP chain is present.
The flaw is an out-of-bounds write issue that could lead to arbitrary code execution when processing a maliciously crafted file. This vulnerability is significant because it allows attackers to exploit it to gain full control over affected Apple devices.
A memory corruption flaw in Wind River VxWorks 7 prior to 26.09 can lead to arbitrary code execution due to specific system call arguments, which could allow attackers to exploit this vulnerability.