All CVEs — page 568 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
The flaw in Netty allows a remote unauthenticated attacker to bypass security controls by manipulating HTTP/1 requests, potentially leading to unauthorized access or cache poisoning.
This vulnerability allows authenticated users to upload a PHP file that can be executed remotely, leading to potential full system compromise.
This flaw allows code running inside the sandbox to overwrite the `Symbol.species` property of a host Promise, leading to arbitrary code execution on the host. It matters because it bypasses security measures intended to prevent such attacks.
This vulnerability allows attackers to escape the sandbox and execute arbitrary commands on the host system by exploiting the DANGEROUS_BUILTINS denylist in vm2 NodeVM versions before 3.12.1.