All CVEs — page 498 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
The flaw is an integer overflow issue in GitLab's CI/CD configuration handling, allowing an authenticated user to execute arbitrary code. This is critical as it can lead to full server compromise.
The flaw allows an authenticated user to access sensitive CI/CD variable values through the Duo AI troubleshooting feature due to missing authorization checks.
The flaw is a double free issue in GitLab's CI/CD configuration parsing, allowing an authenticated user to execute arbitrary code on the server. This is critical as it can lead to full server compromise.
This vulnerability allows remote code execution through a specially crafted email in Microsoft Office Outlook, posing a significant risk to users who open malicious emails.
The flaw allows an attacker to upload a .pht file, which is executed as PHP, leading to remote code execution.
The vulnerability allows authenticated attackers with Subscriber-level access or above to escalate their privileges to Administrator by manipulating CSV files during the export and re-import process of the Import and export users and customers plugin for WordPress.