All CVEs — page 557 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
LightLLM through 1.2.0 allows unauthenticated attackers to register arbitrary nodes via the /pd_register WebSocket endpoint, leading to potential full user prompt disclosure, denial of service, or internal network request issues.
The flaw allows attackers to upload arbitrary files, leading to potential remote code execution, due to missing capability checks and lack of file validation.
This flaw allows a remote attacker to bypass security restrictions in IBM Guardium Data Protection 12.2 due to improper authorization, posing a significant risk to data security.
IBM Guardium Data Protection 12.2 contains a SQL injection vulnerability that allows authenticated attackers to extract sensitive information from the database by manipulating SQL commands. This represents a significant data exposure risk since Guardium is designed to protect sensitive data.
The flaw allows a remote attacker to execute arbitrary code due to improper input handling, posing a significant security risk.
The flaw allows a remote authenticated attacker to execute arbitrary code, posing a significant risk due to improper input handling in web page generation.
This flaw allows a remote authenticated attacker to obtain sensitive information due to improper handling of SQL commands, posing a high risk to data security.
The flaw allows a local attacker to gain elevated privileges due to improper privilege management, which could lead to unauthorized access and data compromise.
This flaw allows a remote attacker to execute arbitrary OS commands, posing a significant risk to system security.
This vulnerability allows a remote attacker to bypass security restrictions by exploiting a cross-site request forgery (CSRF) flaw in IBM Guardium Data Protection 12.2, potentially leading to unauthorized access or data manipulation.
The flaw allows a local attacker with low-privileged access to execute arbitrary commands as root via the SUID-root nmap_wrapper binary, leading to full compromise of the Collector appliance.
This flaw allows a remote attacker to execute arbitrary SQL commands, leading to potential data breaches or system compromise.
The flaw allows a remote attacker to bypass security restrictions by exploiting improper certificate validation in IBM Guardium Data Protection 12.2, posing a significant risk to data security.
The flaw is a missing authentication vulnerability in IBM Guardium Data Protection 12.2's LoadBalancerServlet, allowing unauthenticated users to perform privileged operations, which could lead to unauthorized actions and impact system integrity and availability.
This flaw allows a remote attacker to bypass security restrictions through a cross-site request forgery vulnerability, potentially leading to unauthorized access or data manipulation.
IBM Guardium Data Protection 12.2 allows authenticated attackers to bypass authorization controls and access restricted data or functionality. This vulnerability enables attackers who can log into the system to perform actions they shouldn't be permitted to do, potentially leading to unauthorized data access or modification.
This flaw allows a remote attacker to bypass security restrictions by exploiting the ChangeTrackerServlet due to missing authentication, posing a critical risk to the system's integrity.
This flaw allows a remote authenticated attacker to execute arbitrary code due to improper input handling, posing a significant security risk.