All CVEs — page 617 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
The flaw allows unauthenticated attackers to modify or delete Stripe payment credentials, potentially redirecting payments to attacker-controlled accounts or disabling the Stripe integration entirely.
The LightSync Pro plugin for WordPress allows attackers to upload arbitrary files due to missing file type validation, posing a risk of remote code execution for users with Author-level access or higher.
The flaw allows unauthenticated attackers to modify and access data through missing capability checks in the Material Dashboard plugin for WordPress.
The flaw allows arbitrary function execution via an unfiltered user input parameter, enabling authenticated attackers with Administrator-level access to run any PHP code.
This vulnerability in the Linux kernel allows a race condition where a per-socket policy change can race with a send operation, leading to a double-free of the socket's dst cache, potentially causing a kernel crash or denial of service.
The vulnerability in the Linux kernel's xfrm6 module allows for a double netdev_put underflow, potentially leading to a denial of service or other kernel issues.
This vulnerability allows a remote client to perform a slab-out-of-bounds read by crafting a compound SMB2 request, potentially leading to information disclosure.
This vulnerability in the Linux kernel's GTP (Generic Tunneling Protocol) implementation allows a malicious packet with specific payload to cause a kernel panic by triggering an invalid memory access.
The flaw is a potential general protection fault due to uninitialized netlink_ext_ack pointer dereferencing in the Linux kernel's nexthop module. This matters because it could lead to a kernel panic or system instability if exploited.
The flaw allows a null pointer dereference in the Linux kernel, potentially leading to a system crash or denial of service.
The flaw involves a use-after-free vulnerability in the Linux kernel's mac80211 subsystem, where debugfs entries are not properly removed when adding new links, leading to potential memory corruption.
This vulnerability in the Linux kernel's mac80211 subsystem can lead to a double-free error, which may result in a kernel crash or denial of service.
This vulnerability in the Linux kernel's mac80211 subsystem can lead to a double-free condition, which could result in a kernel crash or potentially other issues.
This flaw allows an attacker to manipulate the free space cache in the Btrfs file system, leading to potential memory corruption or other issues when the cache is loaded with more entries than the allocated pages can hold.
This flaw in the Linux kernel's xfrm: iptfs module allows for memory corruption when handling fragmented packets, leading to potential kernel panics.
A stack-based buffer overflow vulnerability exists in Apache Lucy, which could lead to remote code execution if exploited.
The flaw is a memory allocation vulnerability in Apache Lucy that allows for excessive size values, potentially leading to denial of service or other issues. This matters because it can be exploited if an attacker can manipulate input sizes.
The flaw is a deserialization vulnerability in Apache Lucy, allowing attackers to execute arbitrary code. This matters because it can lead to complete system compromise.
Uncontrolled recursion vulnerability in Apache Lucy allows attackers to cause a denial of service by triggering excessive memory consumption.