All CVEs — page 611 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
The flaw allows an attacker to misinterpret the size of a TLB invalidation, leading to potential security issues, especially in virtualized environments using KVM and arm64 architecture.
This vulnerability allows for a use-after-free condition in the Linux kernel's Bluetooth SCO connection handling, which could lead to a denial of service or potentially other attacks if exploited.
The flaw allows an attacker to maintain access to a user's account after their password is changed, due to the lack of session invalidation.
This flaw allows an attacker to maintain access to a user's account after their password is reset, due to improper session cleanup.
The vulnerability in Unbound up to 1.26.0 allows an attacker to cause a denial of service or execute remote code through a maliciously crafted DNSKEY, due to improper handling of DNSKEY RDATA.
This flaw allows a malicious authenticated client to execute arbitrary code with root privileges on the switch via a specially crafted request to the gRPC Network Management Interface (gNMI). This is a high-risk vulnerability due to the potential for complete system compromise.
This flaw allows an authenticated user to use the wrong privilege level for gRPC requests to OpenConfig, potentially leading to unauthorized access. It matters because it can bypass intended authorization controls.
This flaw allows a specially crafted request to modify an account's properties, potentially granting unauthorized elevated privileges. It matters because it can lead to unauthorized access and privilege escalation without proper mitigation.