All CVEs — page 476 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
This flaw allows an attacker to disable a path or route a later request past an authorization check by leveraging a dispatch memo keyed on the request path alone, potentially leading to unauthorized access or denial of service.
The iSteamX mobile application's AWS policy flaw allows authenticated users to access wildcard MQTT topics, exposing other users' device data and potentially scalding due to unintended device activation.
A stack-based buffer overflow exists in Espruino 2v29 where a mismatched pointer type causes an 8-byte write to adjacent stack memory when handling JavaScript error stack traces. This allows remote attackers to potentially corrupt program execution flow and execute arbitrary code.
The flaw in the Botslab G980H dash camera firmware allows an attacker to intercept firmware updates and install modified firmware, leading to potential execution of unauthorized code.