All CVEs — page 475 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
This flaw allows SVG attachments in email messages to be processed by the ticket email parser, potentially leading to code execution if the SVG content contains malicious code.
This vulnerability allows an authenticated attacker to execute arbitrary PHP code by manipulating widget sequence data, leading to Remote Code Execution (RCE).
The flaw allows an attacker to bypass PKCE validation for public Relying Parties, enabling them to obtain user tokens by replaying client_id with an arbitrary secret.
The flaw allows unauthenticated OAuth2 token introspection, enabling attackers to confirm token validity and extract metadata, potentially translating user identifiers across Relying Parties.
The flaw allows execution of Python code from an obfuscated URL, enabling arbitrary code execution as the user.