All CVEs — page 516 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
The flaw allows unauthenticated attackers to write arbitrary PHP files on the server, leading to Remote Code Execution (RCE) when the caching feature is enabled.
The divi-dash WordPress plugin before 1.0.7 fails to validate the client IP address used for rate limiting and banning, allowing attackers to spoof IP addresses and bypass these features, leading to potential denial of service.
The flaw allows unauthenticated users to extract arbitrary data, including password hashes, by injecting a payment token into a SQL statement without proper sanitization.
The flaw is a stack-based buffer overflow in the copy_msg_element function of the Device Discovery Service in Fast FAC1203R Gigabit Edition 2.0.4, which can lead to remote code execution. This issue is critical as it allows attackers to exploit the vulnerability to gain control over the affected system.