All CVEs — page 493 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
This flaw allows a remote authenticated attacker to obtain sensitive information by exploiting improper validation of the X-Forwarded-Proto header in IBM DataStage on Cloud Pak for Data 5.4.0.0, posing a significant risk to data security.
This flaw allows a remote authenticated attacker to execute arbitrary commands on the system due to improper handling of OS commands, posing a significant security risk.
The flaw allows a remote authenticated attacker to execute arbitrary commands due to path traversal, posing a significant security risk.
This flaw allows a remote authenticated attacker to execute arbitrary commands on the system due to improper handling of OS commands, posing a significant security risk.
This flaw allows a remote authenticated attacker to execute arbitrary code due to improper handling of OS commands, posing a significant security risk.
The flaw allows a remote unauthenticated attacker to inject SQL statements, potentially leading to unauthorized access, modification, or deletion of database information.
A stack-based buffer overflow vulnerability exists in Altera Trusted Firmware on HPS, allowing for potential exploitation due to improperly configured or implemented memory protections.
The flaw is an untrusted pointer dereference vulnerability in Altera Trusted Firmware on HPS, which can be exploited to bypass memory protections and potentially gain unauthorized access or cause system crashes.
The flaw is an untrusted pointer dereference vulnerability in Altera Trusted Firmware on HPS, which can be exploited to bypass memory protections and potentially gain unauthorized access or cause system crashes.
This vulnerability in Altera Trusted Firmware allows out-of-bounds read, leading to privilege escalation and overflow buffer issues, posing a significant security risk.
The flaw is an out-of-bounds read vulnerability in Altera Trusted Firmware on HPS, which can lead to privilege escalation and overflow buffer issues. This matters because it can allow attackers to gain higher privileges and potentially control the system.
A stored cross-site scripting (XSS) vulnerability in phpMyFAQ versions prior to 4.2.0-alpha allows unauthenticated users to inject JavaScript that can be executed in an administrator's browser, leading to potential admin account takeover.
The flaw allows a remote attacker to execute arbitrary code through the open() functions, posing a significant security risk.
A remote code execution vulnerability exists in geelen mcp-remote versions 0.1.16 through 0.1.38, allowing attackers to execute arbitrary code via specific functions.
The flaw allows an attacker to forge server-side requests, potentially leading to unauthorized access to internal resources via the WWW-Authenticate header.