All CVEs — page 614 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
The flaw involves an integer overflow in the parsing of W64 CUE chunk metadata, leading to potential buffer overflows and code execution.
The flaw is an operator-precedence bug in the cv.url validator, allowing any file: URI to pass validation, which can lead to unauthorized access to external components.
The flaw allows memory corruption via uncanceled AIO requests on error, potentially leading to kernel writes into caller-owned buffers.
The vulnerability allows an attacker to inject OS commands through a crafted project name, leading to potential remote code execution.
The flaw in nanoMODBUS allows an out-of-bounds stack read, leading to a potential wild-pointer write. This can be exploited by an attacker to gain unauthorized access or cause system instability.
The flaw in nanoMODBUS allows for an out-of-bounds write due to improper validation of the object_length field, which can lead to potential code execution or data corruption.
The flaw allows an attacker to perform an out-of-bounds write, leading to potential data corruption or system instability. This is critical because it can be exploited without user interaction and affects the Modbus server-side handle_read_file_record function.
This flaw involves a use-after-free condition in the RDMA/rxe module of the Linux kernel, leading to potential kernel crashes or page use-after-free vulnerabilities.
The flaw allows unauthenticated clients to read any file accessible by the backend process due to improper URI handling and lack of proper token validation in non-Electron deployments.
The flaw allows remote URLs to be included in Facelet processing, potentially exposing sensitive files. This matters because it can lead to unauthorized access to critical server files.
The flaw allows admin users to upload arbitrary files without validation, posing a significant security risk.
The flaw allows unauthorized users to perform database operations such as adding, editing, and deleting records without proper authentication, posing a significant security risk.
The flaw allows an attacker to bypass authentication by directly manipulating the SQL query through unescaped POST parameters, leading to unauthorized access.
The flaw allows SQL injection by improperly sanitizing user input and directly concatenating it into a SQL query.
The flaw lies in the backmeup npm package, which directly concatenates user-provided values into shell commands, leading to potential command injection. This is significant because it allows an attacker to execute arbitrary commands, compromising the system.