All CVEs — page 546 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
The vulnerability allows manipulation of the argument roleId to improperly control resource identifiers, potentially leading to unauthorized access or data exposure.
The flaw allows for memory exhaustion due to uncontrolled decompression of data with high compression ratios, potentially leading to denial of service.
The flaw allows users to bypass mandatory two-factor authentication by manually visiting a session restart link, gaining unauthorized access.
The flaw allows administrators with limited privileges to read or modify sensitive client configurations in the master realm by accessing them through a controlled realm, potentially exposing client credentials.
The flaw allows a delegated administrator with limited viewing privileges to access full user profiles and roles, exposing sensitive information.
The flaw allows an attacker to manipulate the PhysicalAddress/Size argument, leading to a write-what-where condition, which can be exploited locally to gain unauthorized access or control.
A cross-site scripting vulnerability exists in xxl-job versions up to 3.4.2/3.5.0 due to improper input handling, allowing attackers to inject malicious scripts via job names or authors.
The flaw allows SQL injection by manipulating the filter argument in drogonframework's makeCriteria function, posing a high risk due to remote exploitability.
The flaw allows an attacker to access a user’s session by controlling a privileged WebView, posing a high security risk.
The flaw allows unauthenticated attackers to upload arbitrary files, including PHP files, to execute code on the server, due to lack of file type and extension validation.
The vulnerability allows SQL injection through manipulation of the sort argument in the Mapper::orderBy function, posing a high risk due to remote exploitability.
The vulnerability allows local manipulation of the PhysicalAddress argument, leading to a write-what-where condition in the BioStar Temperature Monitor Utility 1.2.1806.2200. This can result in arbitrary code execution.
The vulnerability in BioStar VALKYRIE 2.10.2411.0800 allows for a write-what-where condition via manipulation of the PhysicalAddress argument, which can be exploited locally. This flaw is significant as it can lead to remote code execution or other severe impacts.
The flaw allows local attackers to manipulate the AssociatedIrp argument, leading to a write-what-where condition, potentially enabling unauthorized code execution.