All CVEs — page 555 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
The WP Recipe Maker plugin allows unauthenticated attackers to execute arbitrary shortcodes server-side, leading to potential disclosure of sensitive data.
This flaw allows unauthenticated attackers to upload executable files via a hidden File Upload field in Gravity Forms for WordPress, leading to potential remote code execution.
SiYuan through 3.8.4 allows attackers to inject malicious style values via crafted notebooks or administrative endpoints, leading to stored cross-site scripting (XSS) attacks.
This flaw allows attackers to inject HTML payloads into notebook names, which can execute JavaScript with Node.js access when the Daily Note picker dialog opens, leading to potential operating system command execution.
The vulnerability in Totolink A3002MU Hh-B20211125.1046 allows for remote buffer overflow via manipulation of the submit-url argument, leading to potential remote code execution.
The vulnerability in Totolink A3002MU Hh-B20211125.1046 allows for buffer overflow via manipulation of the submit-url argument, leading to potential remote code execution.
The flaw allows unauthenticated access to internal services via crafted devfile payloads, leading to SSRF and potential DoS.
The vulnerability in Totolink A3002MU Hh-B20211125.1046 allows for buffer overflow via the manipulation of the 'webpage' argument, leading to potential remote code execution.
This flaw involves a use after free vulnerability in Microsoft Edge (Chromium-based) that could allow an attacker to gain elevated privileges locally.