All CVEs — page 592 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
This vulnerability allows a low-privileged attacker to exploit incorrect default permissions, potentially leading to elevation of privileges.
The flaw allows a malicious archive to create a symlink chain that can overwrite any file writable by the process, potentially leading to code execution.
The vulnerability allows a stored cross-site scripting (XSS) payload to be executed in an administrator's browser, leading to potential session hijacking and unauthorized actions.
The flaw allows unauthenticated attackers to exploit incorrect encryption parameter initialization, gaining root access and control over FMC REST APIs.
The Dell Update Package Framework prior to 26.07.03 has an Unchecked Return Value vulnerability, allowing a low-privileged attacker with local access to potentially gain higher privileges.
The flaw allows a malicious archive to overwrite files outside the intended directory, potentially enabling code execution.
CVE-2026-20331 involves protection mechanism failures that could allow attackers to exploit vulnerabilities in Cisco Secure products, leading to potential high impact issues.
This vulnerability allows an attacker to execute arbitrary commands on the underlying operating system of a Cisco ISE device by exploiting insecure deserialization of a Java byte stream, potentially leading to privilege escalation and denial of service.
This vulnerability allows an attacker to perform command injection attacks and elevate privileges to root through the REST API of Cisco ISE and ISE-PIC, leading to potential system compromise and DoS conditions.
This vulnerability allows an attacker to perform command injection attacks and elevate privileges to root through the web-based management interface of Cisco ISE and ISE-PIC, leading to potential code execution and denial of service.
CVE-2026-20234 involves insufficiently protected credentials, a critical flaw that could allow unauthorized access to sensitive information and systems.