All CVEs — page 522 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
Crypt::SelfCertificate versions from 1.01 through 1.05 for Perl contain malware that executes Python code from an obfuscated URL, allowing arbitrary code execution.
The flaw allows attackers to inject malicious scripts into article content, which can be executed in the context of the victim's browser, leading to potential data exfiltration or manipulation.
The flaw is a SQL injection vulnerability in the PageAction.verify endpoint of MCMS 6.1.1 through 6.2.1, allowing attackers to execute arbitrary SQL commands and potentially gain full control over the database.
The vulnerability allows an out-of-bounds write that could lead to arbitrary code execution, posing a significant risk to users opening malicious files.
The vulnerability allows for a stack-based buffer overflow, enabling arbitrary code execution when a user opens a malicious file. This can lead to significant security risks.
The flaw is a Server-Side Request Forgery (SSRF) vulnerability in Adobe Experience Manager Forms JEE that allows a low-privileged attacker to gain elevated access to internal resources, potentially leading to privilege escalation.
The flaw is a Server-Side Request Forgery (SSRF) vulnerability in Adobe Experience Manager Forms JEE that could allow attackers with high privileges to gain elevated access to internal resources. This matters because it can lead to unauthorized access and data exposure.
The vulnerability allows an out-of-bounds write that could result in arbitrary code execution, posing a significant risk to users.
The flaw is an Improper Input Validation vulnerability in Adobe Experience Manager Forms JEE that allows high-privileged attackers to execute arbitrary code. This matters because it can lead to full system compromise without user interaction.
The vulnerability allows an out-of-bounds write that could lead to arbitrary code execution, posing a significant risk to users opening malicious files.