All CVEs — page 585 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
The flaw allows unauthenticated attackers to bypass validation and execute arbitrary PHP code by submitting crafted serialized PHP objects via POST requests.
The Dell Server Update Utility prior to 26.07.01 has an Uncontrolled Search Path Element vulnerability, allowing a low-privileged local attacker to execute arbitrary code.
The flaw allows attackers to inject malicious HTML into document titles, leading to potential script execution in the Electron renderer with access to child_process for command execution.
SiYuan versions before 3.8.4 fail to properly escape HTML in bookmark labels, allowing attackers to inject scripts that can execute commands via the Electron renderer.
The flaw allows unauthenticated attackers to fixate victim sessions by accepting session identifiers from query strings and request variables, enabling session hijacking and unauthorized access to victim accounts.