All CVEs — page 477 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
The flaw is a type confusion issue in AWS pgcollection 2.0.0 through 2.1.1 that allows an authenticated remote user to execute arbitrary code as the postgres operating system user. This is due to crafted SQL statements that rely on mismatched type metadata in collection value retrieval and array conversion functions.
The flaw allows unauthenticated attackers to register OAuth clients and take over user accounts by exploiting the OAuth 2.0 Dynamic Client Registration endpoint, leading to unauthorized access to user data.
Omni C20 fails to validate certificates, allowing attackers to perform man-in-the-middle attacks and potentially execute arbitrary code.
A command injection vulnerability in the pairing process allows unauthenticated attackers to execute arbitrary system commands with high severity impact.
The flaw in the Botslab G980H dash camera firmware allows an attacker to predict session identifiers, potentially bypassing authentication controls. This is significant because it enables unauthorized access to camera functionalities.
The flaw in the Botslab G980H dash camera firmware allows an unauthenticated attacker to exploit a session-based authorization vulnerability, gaining access to privileged functionality.
The flaw in the Botslab G980H dash camera firmware allows an unauthenticated attacker to exploit residual authentication state, gaining unauthorized access to another client's session.
The flaw allows an unauthenticated attacker to replay a valid authentication value to gain unauthorized access to the device, potentially leading to unauthorized control of the dash camera's functionality.
The flaw is an integer overflow in the MongoDB Python Driver's bundled native extension, which can lead to a buffer overflow if an attacker supplies a large amount of data. This matters because it could allow an unprivileged user to exploit the vulnerability to execute arbitrary code within the application's process.