All CVEs — page 586 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
The flaw allows attackers to inject malicious headers into HTTP responses, potentially enabling session fixation, cache poisoning, or security-header corruption.
The flaw allows an unauthenticated attacker to exploit a JSESSIONID vulnerability in Opencast versions prior to 19.7 and 20.2, leading to session hijacking and potential full administrative account takeover.
The flaw allows an attacker to authenticate with a victim's email and bind their external identity to the victim's account, exposing sensitive information and permitting account changes or orders as the victim.
The flaw allows an attacker to inject and execute arbitrary scripts via administrator-controlled descriptions, potentially compromising the viewing administrator's session.
The flaw in Dell SmartFabric Manager versions prior to 2.2.1 allows a low-privileged attacker to exploit an Insufficient Verification of Data Authenticity vulnerability, potentially leading to elevated privileges.
The flaw allows unauthenticated attackers to poison the KV transfer routing table by exploiting an unsecured PUT /route endpoint, potentially leading to denial of service or disclosure of sensitive metadata.
This vulnerability allows authenticated project members to write arbitrary files outside the project repository, potentially leading to code execution.
This flaw allows attackers to read host process identity and network topology, and hijack the host process DNS resolver, leading to potential data exfiltration and DNS spoofing.