All CVEs — page 500 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
The flaw in librsvg allows attackers to cause a use-after-free error by processing SVG documents with nested XML inclusions and duplicate entity declarations, potentially leading to a denial of service or arbitrary code execution.
A SQL injection vulnerability in W4 Post List plugin allows attackers to perform blind SQL injection attacks, potentially leading to unauthorized data access and manipulation. This is particularly concerning because it affects a widely-used WordPress plugin.