All CVEs — page 550 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
The flaw allows users with forms-management permissions to execute arbitrary code by deserializing a value from an XML-RPC request, posing a high risk due to the broad permissions associated with this role.
This flaw allows an attacker to authenticate as any account, including an administrator, by controlling the login name asserted by the identity provider, bypassing the configured criterion for linking identities.
The flaw is a heap-based buffer overflow in the Kamailio CDP Diameter Receiver module, which can be exploited to launch remote attacks. This matters because it allows attackers to execute arbitrary code or cause a denial of service.