All CVEs — page 593 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
This vulnerability allows for os command injection through manipulation of the argument data.url, leading to potential remote code execution.
Sentry Seer is vulnerable to a multi-stage trust-boundary violation allowing unauthenticated attackers to execute arbitrary code through crafted telemetry events.
Dell ObjectScale versions prior to 4.4.0.0 are vulnerable to Deserialization of Untrusted Data, allowing unauthenticated attackers to execute remote code.
The flaw in djust prior to version 1.0.7 allows unauthorized access to tenant-specific data over WebSocket/SSE connections, due to improper tenant isolation.
The flaw in djust allows cross-origin requests to drive a victim-cookie-authenticated session, enabling state-changing events to be triggered as the victim.
The vulnerability in LMDeploy allows remote code execution due to improper deserialization of messages, posing a critical risk.
The flaw is an Improper Authentication vulnerability in Dell ObjectScale versions prior to 4.4.0.0, allowing unauthenticated attackers to gain unauthorized access. This matters because it can lead to significant data breaches and unauthorized system control.
This vulnerability allows unauthenticated attackers to execute arbitrary HTTP requests, potentially leading to unauthorized access to internal endpoints and cloud metadata services.
The flaw in @fastify/proxy-addr allows unauthenticated clients to manipulate the X-Forwarded-For header, bypassing IP-based access control, rate limiting, geolocation, and audit logging.