All CVEs — page 457 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
This vulnerability in the Linux kernel's RDMA/srpt module can lead to incorrect send queue credit accounting, potentially causing denial of service or other issues if exploited.
An access control flaw in APSL puput's BlogPage.get_entries() component allows unauthenticated users to view restricted blog content through multiple entry points including archives, widgets, and RSS feeds. This means sensitive blog posts that should be private can be read by anyone with access to the blog.
This vulnerability allows an authenticated local user to gain elevated privileges to NT AUTHORITY\SYSTEM, enabling them to perform actions with full system access.
A remote attacker can extract sensitive information from Wellav WES emergency broadcast terminals through a vulnerable global API request wrapper function, potentially exposing system details or configuration data.
The flaw allows an authenticated attacker to exploit a vulnerability in the VMware datastore driver of OpenStack glance_store by providing a malicious image location URI, leading to the exposure of sensitive authentication headers.
The flaw allows an authenticated attacker to inject arbitrary commands via the /index.xgi endpoint, leading to potential remote code execution.