All CVEs — page 624 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
A local attacker can execute arbitrary code by exploiting the vms_fixfilename() function in Vim versions up to 9.2.0389, allowing for remote code execution.
The flaw is a stack buffer overflow in OpenSIPS due to improper handling of SIP header names, allowing remote attackers to crash the process or achieve remote code execution.
The vulnerability allows command injection through manipulation of the 'esps.apcm.version' argument in the '/api/esps' endpoint, enabling remote code execution.
The flaw allows command injection through manipulation of the workMode argument in H3C NX15 V100R017's esps.ipv6.wan function, enabling remote code execution.
The vulnerability allows command injection through manipulation of the esps.filter.url argument in the Add function of H3C NX15 V100R017's /api/esps API, enabling remote code execution.
This vulnerability allows unauthenticated attackers to inject arbitrary PHP code into the application configuration file, leading to persistent remote code execution as the web-server process user.
This vulnerability allows unauthenticated attackers to bypass authentication by manipulating the X-Requested-With header, gaining access to admin endpoints and performing actions such as manipulating poll states and vote counts.
The flaw allows any authenticated user to execute scripts in the Open WebUI origin, potentially leading to session hijacking and server-side code execution.
The flaw allows users to bypass global routability checks by embedding IPv4 addresses in transition encodings within a NAT64 gateway, potentially exposing internal network responses.
The vulnerability allows an attacker to exchange an OAuth access token for a session token, potentially gaining unauthorized access to the platform.
The flaw allows an authenticated user to use JavaScript to access blocked internal addresses, potentially exposing sensitive data in web-search or RAG output.
The vulnerability allows for authentication bypass in H3C NX15 V100R017 through manipulation of an API endpoint, leading to potential unauthorized access.
The flaw allows a remote unauthenticated actor to execute arbitrary code by manipulating the project directory path, bypassing workspace trust protections.
The flaw in Kiro IDE allows a remote unauthenticated actor to execute arbitrary code by manipulating the project directory path, bypassing workspace trust protections.