All CVEs — page 424 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
The XS::Parse::Infix module incorrectly handles numeric values by treating them as array references, leading to potential segmentation faults when processing decoded input like JSON data. This vulnerability allows attackers to control memory access patterns through crafted numeric inputs.
The flaw allows a malicious PR in a fork to extract the GITHUB_TOKEN, enabling manipulation of the Git repository, commit checks/statuses, or issue/PR comments.
This vulnerability allows an attacker to read or write files outside the intended output directory by exploiting symlink chains in the decompress package, potentially leading to remote code execution.
This vulnerability allows remote attackers to execute arbitrary code by manipulating the 'opt' argument, leading to a stack-based buffer overflow.
The flaw allows attackers to inject arbitrary Python code via a newline in a nested model_type value, leading to remote code execution.
The vulnerability allows the Fleet agent to write resources to downstream clusters using cluster-admin credentials, potentially overwriting configuration files in multi-tenancy environments.
This flaw allows remote attackers to retain access credentials after logging out due to insufficient credential cleaning, impacting SUSE Rancher 2.15 before 2.15.2.
The flaw allows unauthenticated attackers to execute a stored cross-site scripting attack in the Rancher UI, leading to potential data exfiltration, session hijacking, and other web-based attacks.
This flaw allows unauthenticated users to execute arbitrary code on the IdentityIQ server due to improper input validation, posing a critical risk.