All CVEs — page 524 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
The vulnerability allows heap-based buffer overflow, leading to arbitrary code execution. This can be exploited if a user opens a malicious file, posing a significant risk.
The vulnerability allows an out-of-bounds write that could result in arbitrary code execution, posing a high risk to users who open malicious files.
The vulnerability allows an out-of-bounds write that could result in arbitrary code execution, posing a significant risk to users who open malicious files.
The Uncontrolled Recursion vulnerability in Bridge allows an attacker to execute arbitrary code, posing a high risk to user systems.
The flaw is a heap-based buffer overflow in Bridge, which could allow an attacker to execute arbitrary code with the privileges of the current user. This matters because it can lead to unauthorized access and potentially full system compromise.
A vulnerability exists in plone.app.portlets.portlets where user-supplied template fields can be exploited to execute arbitrary code, allowing any authenticated user to escalate privileges.
The flaw allows remote unauthenticated attackers to bypass IP-based throttling by manipulating the X-Forwarded-For header, leading to potential unauthorized access to admin functionalities.
The flaw is an Improper Limitation of a Pathname to a Restricted Directory vulnerability in Adobe Connect, allowing attackers to access sensitive files outside the intended access scope. This matters because it can lead to unauthorized access to critical information without user interaction.
The flaw allows any IAM principal with lambda:InvokeFunction permission to escalate privileges and perform unauthorized AWS API operations, bypassing explicit IAM denials.
The vulnerability allows a low-privileged attacker to execute arbitrary code, posing a significant risk to the system's security.