All CVEs — page 623 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
The flaw in open62541 allows a remote attacker to cause a denial of service through heap use-after-free in GDS PushManagement certificate update when UA_ENABLE_GDS_PUSHMANAGEMENT is enabled.
The flaw allows an attacker to smuggle arbitrary SIP messages by exploiting unsigned int overflow in Content-Length parsing, bypassing security policies and rate limiting.
The flaw is a buffer overflow in the {s.b64encode} string transformation in OpenSIPS, which can lead to corruption of adjacent buffers and potentially remote code execution.
The vulnerability allows for command injection via the reload_config function in H3C NX15 V100R017, enabling remote code execution.
MaxSite CMS is vulnerable to PHP object injection, allowing unauthenticated attackers to execute arbitrary code via a malicious serialized PHP object in the maxsite_comuser cookie.
The flaw allows a collaborator with write access to a shared chat folder to delete chats and messages belonging to the folder owner, potentially leading to data loss.
The vulnerability allows a chat participant to craft a regex pattern that can consume significant CPU resources, potentially blocking the event loop and affecting other users.
The flaw allows a malicious chat message to execute arbitrary scripts in the browser of the viewer, potentially leading to session token theft and account compromise.
The flaw allows authenticated non-admin users to access full Python tool source code, potentially exposing sensitive information like API keys and internal URLs.
The flaw allows automation rules to cause availability issues for other users due to synchronous computation on the event loop.
This flaw allows attackers to execute arbitrary code by placing a shared object on target storage, due to incorrect access control in the Executive Services dynamic application start path component of NASA cFS v7.0.1. This is a critical vulnerability that can lead to full system compromise.
The flaw allows an attacker to execute arbitrary commands on the system where the vulnerable Google::Auth module is running, due to the lack of proper input validation and control over the command execution.
The flaw allows server-side request forgery and credential exfiltration due to unvalidated URLs from credentials JSON.
A local attacker can exploit a vulnerability in Vim Project versions up to 9.2.0389 to execute arbitrary code, due to an issue in the vms_fixfilename() function.