All CVEs — page 427 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
This vulnerability allows unauthorized access to perform destructive operations on the PostgreSQL database during HA failover, leading to potential data loss or corruption.
This vulnerability allows an authenticated federation peer to execute arbitrary code by sending a specially crafted message, leading to potential denial of service, out-of-memory conditions, or broker state manipulation.
This flaw allows any authenticated user with specific permissions to inject OS commands, leading to potential full compromise of the worker node.
This vulnerability allows an attacker to upload a file via HA Failover Config sync, leading to remote code execution. It matters because it can be exploited to gain full control over the system.
The flaw allows for arbitrary OS command execution due to unquoted string concatenation in the javaOpts parameter, enabling attackers to inject shell commands.
The flaw allows an authenticated operator-level user to inject a Keepalived configuration, potentially enabling command execution as root, which can lead to full system compromise.
This flaw allows PowerShell command injection in Windows DNS SPF/TXT record push, leading to remote code execution. Attackers can exploit this to gain full control over affected ManageEngine DDI Central instances.