All CVEs — page 478 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
The flaw allows a local, low-privileged user to execute arbitrary code as SYSTEM by placing an executable in the machine PATH, which is resolved by the Insight Agent running assessment content below version 0.0.269.0.
The flaw is an Improper Certificate Validation vulnerability in Dell ThinOS 10, allowing unauthenticated attackers with adjacent network access to bypass protection mechanisms and gain unauthorized access. This matters because it can lead to significant security breaches without requiring authentication.
The flaw in Dell Rugged Control Center (RCC) versions prior to 5.2.206 allows a low-privileged attacker with local access to elevate their privileges, posing a significant security risk.
The flaw is a missing authentication for a critical function in Dell ThinOS 10 versions prior to SecurityAddon_2605.10.2766_T10, allowing unauthenticated attackers to gain unauthorized access. This matters because it exposes systems to potential unauthorized access, compromising data and system integrity.
The flaw allows an authenticated user to inject a malicious URL, enabling internal service discovery and potential access to cloud metadata, leading to credential disclosure and resource modification.
A stored cross-site scripting vulnerability exists in code16 Sharp versions before 9.22.5, allowing attackers to inject executable markup that can be rendered when another user views the content.
The EmbedVideo MediaWiki extension had a cross-site scripting vulnerability where video URLs were not properly sanitized before being inserted into iframe src attributes, allowing attackers to inject HTML/JavaScript when $wgEmbedVideoRequireConsent was disabled. This could lead to unauthorized code execution in users' browsers.