All CVEs — page 526 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
The flaw allows a permitted Confluence MCP caller to upload a file as an attachment, potentially disclosing data readable by the server process.
The flaw allows a network client to invoke Atlassian tools as the operator due to unverified user identity, posing a critical risk.
The flaw allows a client to invoke hidden tools despite configured least-privilege restrictions, leading to potential unauthorized access to read, write, or delete operations.
The flaw is an Incorrect Authorization vulnerability in Adobe Campaign Classic that allows arbitrary code execution. This matters because it can lead to full system compromise without user interaction.
The flaw is an Incorrect Authorization vulnerability in Adobe Campaign Classic that allows arbitrary code execution, posing a critical risk.
The flaw is an Improper Control of Generation of Code vulnerability in Adobe Campaign Classic that allows arbitrary code execution, posing a critical risk.
The flaw is an Improper Control of Generation of Code vulnerability in Adobe Campaign Classic that allows for arbitrary code execution, posing a critical risk.
The vulnerability allows an attacker to inject arbitrary code, potentially leading to full system compromise without user interaction.
This vulnerability allows an attacker to inject arbitrary code, leading to potential arbitrary code execution in the context of the current user, which could result in significant damage.
The flaw is a PHP object injection vulnerability in the billing module handler of Softaculous Virtualizor, allowing unauthenticated attackers to execute arbitrary code as root. This vulnerability matters because it provides a high-risk vector for remote code execution, potentially leading to complete system compromise.
This vulnerability allows unauthenticated attackers to execute arbitrary commands as root by exploiting a flaw in the billing module handler, leading to complete control of the host and managed VPS instances.