All CVEs — page 521 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
The vulnerability allows unauthenticated remote attackers to gain unauthorized write access to the file system with elevated privileges, potentially leading to a full system compromise.
The flaw involves default, hard-coded credentials in the Analytics and Location Engine (ALE), allowing unauthenticated attackers to gain unauthorized access to the application and underlying system.
Kaneo versions 2.3.12 before 2.12.2 allow authenticated users with viewer or member roles to delete and modify tasks beyond their permissions by exploiting the bulk task endpoint, leading to unauthorized changes or deletions.
The flaw in LTSecurity LTK3500SF involves hard-coded weak credentials, allowing dictionary-based cracking tools to recover root and guest account passwords, which can then be used to gain root-level access via Telnet and SSH services.
The flaw allows unauthenticated remote code execution due to deserialization of untrusted data, posing a significant security risk.
The flaw allows unauthenticated remote code execution due to insufficient integrity checks, making it a critical vulnerability that can be exploited to gain full control over the system.