All CVEs — page 622 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
The vulnerability allows for SQL injection through manipulation of the FilterString argument in the GetStoredClassByFilter function, enabling remote code execution.
The flaw in OpenSIPS allows an attacker to overflow a buffer by providing a long username, which can corrupt global data and alter the server's routing behavior.
The flaw allows admin-privileged attackers to probe internal network resources by submitting arbitrary URLs without proper validation, potentially reading sensitive information from cloud metadata services and internal APIs.
The flaw allows authenticated non-admin users to manage server-wide embedding backend configuration, leading to plaintext transmission of sensitive data or denial of service.
The flaw allows session fixation attacks due to un invalidated sessions on login in Ghost Admin versions from 2.2.0 to 6.54.1, posing a medium security risk.
The vulnerability allows a staff user to write files outside the intended directory via custom themes, potentially altering system behavior.
The flaw is a buffer overflow in open62541 1.5.5's attribute reading logic, allowing remote attackers to cause a denial of service. This matters because it can lead to system crashes without proper mitigation.
The flaw allows a remote attacker to cause a denial of service by exploiting UA_Client_getRemoteDataTypes in open62541 versions prior to v.1.5.5, potentially disrupting system operations.
The flaw is a heap-based buffer overflow in open62541 1.5.5's HistoryRead path when using the default memory backend history database, allowing potential code execution if exploited.
A buffer overflow vulnerability in open62541 v1.5.5 can be exploited by a remote attacker to cause a denial of service through the Discovery/LDS handling process.
A buffer overflow vulnerability in open62541 1.5.5 allows unauthenticated remote attackers to cause a denial of service by sending malformed RegisterServer or RegisterServer2 requests.
The flaw allows out-of-bounds read in open62541 1.5.5, potentially leading to information disclosure. It matters because attackers can exploit this to gain sensitive data.
The flaw allows remote attackers to cause a denial of service by sending crafted requests, impacting availability.