All CVEs — page 545 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
The flaw involves a denial of service vulnerability in Neethi's policy-intersection due to improperly handled WS-Policy documents, leading to excessive CPU usage.
The flaw involves a small WS-Policy document that can cause Neethi to consume excessive CPU and memory during normalization, leading to a denial of service (DoS). This matters because it can disrupt system operations without requiring sophisticated exploitation techniques.
The flaw allows a specially crafted WS-Policy document to cause heap exhaustion due to unbounded content copying, leading to denial of service.
The flaw allows a specially crafted WS-Policy document to exhaust the thread stack, causing a denial of service. This matters because it can disrupt service without requiring sophisticated exploitation.
This vulnerability allows a user to bypass Kubernetes security context by creating a pod from a malicious checkpointed container, potentially leading to elevated privileges.
The flaw allows for authorization bypass through manipulation of the ID argument in the User Profile API, enabling unauthorized access to user data.
A vulnerability allows for missing authentication by manipulating the argument roleId in the Role Permission API's /role-permission/permission endpoint, posing a risk to system security.
The flaw allows unauthenticated users to mark their own orders as paid by using a genuine transaction from a payment sandbox they control, bypassing order verification.
The flaw allows unauthenticated users to create arbitrary published posts and taxonomy terms by exploiting a lack of authorization and nonce checks in the import routine.
The flaw allows unauthenticated users to execute arbitrary shortcodes by nesting them, potentially leading to remote code execution or data leakage.
The flaw allows unauthenticated users to manipulate item prices in the RestroPress WordPress plugin, potentially placing orders with arbitrary totals or zero value.
The flaw allows a user with sufficient privileges to perform unintended operations on the host filesystem during container restoration, potentially leading to data corruption or unauthorized access.