All CVEs — page 618 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
The vulnerability allows unauthenticated attackers to delete any media attachment in the WordPress media library by exploiting missing capability checks in the `plupload_ajax_delete_file()` function.
This flaw allows unauthenticated attackers to send large HTTP requests that can exhaust memory on the Rancher Manager server, leading to service disruption.
The flaw allows a malicious user to obtain long-lived registration tokens in plaintext, enabling them to register rogue nodes into the Rancher cluster at any time.
The flaw involves improper file path handling in a cookbook example, allowing for potential directory traversal attacks if copied into production code.
The flaw allows an attacker to bypass company ownership checks, leading to unauthorized access and manipulation of customer data.
The flaw allows an attacker to manipulate TwoFA settings without proper authorization, posing a significant security risk.
The flaw allows attackers to upload executable PHP files via a restricted but incomplete blacklist in file names, potentially leading to remote code execution.
The flaw allows unauthenticated attackers to modify post data, including title, content, and status, by exploiting a missing capability check in the `create_post()` function.
The flaw is a blind SQL Injection vulnerability in the TableOn plugin for WordPress, allowing unauthenticated attackers to extract sensitive database information by manipulating the `filter_data[comment_count]` parameter.
The flaw allows unauthenticated attackers to access sensitive page and post content via WordPress REST API endpoints, despite global privacy settings.
HashBrown CMS through 1.4.6 allows attackers to inject OS commands via the branch parameter, leading to potential remote code execution.
HashBrown CMS through 1.4.6 allows attackers to execute arbitrary system commands via crafted file uploads, due to improper handling of the thumbnail generation process.