All CVEs — page 495 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
This flaw allows an 'investigator' user to set arbitrary VQL statements, potentially elevating their privileges to administrator level.
A missing authorization vulnerability in the Task Group APIs of Apache DolphinScheduler allows unauthorized users to access project-related Task Groups without proper permission checks.
The flaw allows unauthenticated attackers to include and execute arbitrary PHP code via the `vcv-template` parameter, leading to potential code execution and data breaches.
The flaw in GIMP allows out-of-bounds write vulnerabilities when processing specially crafted GIMPressionist preset files, potentially leading to arbitrary code execution.
The flaw is an Origin Validation Error in the YOP Poll plugin for WordPress, allowing unauthenticated attackers to steal a REST nonce and change the Administrator's email and password, leading to full account takeover.
Path traversal vulnerability allows attackers to access sensitive files. This flaw is critical as it can lead to data theft or system compromise.
SQL Injection vulnerability allows attackers to execute arbitrary SQL commands, potentially leading to data theft or corruption.