All CVEs — page 508 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
The flaw allows a client to substitute their identity into MQTT topic filters, potentially gaining unauthorized access to other tenants' data. This is due to direct substitution of client ID and username values into pattern-based ACL rules.
This vulnerability allows an attacker to execute arbitrary code via SQL injection in the Moodle Socialwall plugin versions 3.0 to 3.3, posing a critical risk.
The flaw allows server-side template injection, enabling arbitrary Python code execution and OS command execution, posing a significant security risk.
The flaw allows a remote attacker to manipulate database queries, potentially leading to data integrity issues or unauthorized data access.
The flaw allows a malicious actor to inject script into stored network acknowledgement data, leading to session hijacking and unauthorized actions.
The flaw allows unauthenticated remote code execution via Java native deserialization on the PayDir Business Rules Manager RMI SSL endpoint, posing a significant security risk.