All CVEs — page 630 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
The flaw allows external control of file names or paths in pardus-image-writer before version 0.9.0, potentially leading to removal of important client functionality.
A stack-based buffer overflow vulnerability in the Autodesk FBX SDK allows attackers to execute arbitrary code by parsing a maliciously crafted FBX file.
This vulnerability allows a stack-based buffer overflow when parsing a maliciously crafted FBX file, enabling an attacker to execute arbitrary code.
The flaw allows an attacker to bypass authentication by crafting a password with non-ISO-8859-1 characters, which are silently replaced by '?'.
The flaw involves an improperly controlled sequential memory allocation vulnerability in Samsung Open Source rlottie, allowing for exponential data expansion and potential denial of service.
The flaw is a cleartext storage of sensitive information and SQL Injection vulnerability in HUMANIST Digital Human Resources, which can lead to unauthorized access to sensitive data and potential data breaches.
The flaw is a session hijacking vulnerability due to sensitive query strings being exposed via GET requests. This matters because attackers can exploit it to take over user sessions.
The flaw involves hard-coded cryptographic keys in HUMANIST Digital Human Resources, allowing sensitive constants to be read from an executable. This can lead to unauthorized access to sensitive information.
This flaw allows session IDs to be reused, enabling attackers to replay sessions and potentially gain unauthorized access.
The flaw is a path traversal vulnerability that allows attackers to access sensitive files by manipulating file paths. This matters because it can lead to unauthorized data exposure.
This vulnerability allows an attacker to upload a web shell, enabling remote code execution, due to the unrestricted file upload feature in HUMANIST Digital Human Resources versions before 26.1.
This vulnerability allows an admin to upload and execute arbitrary files, leading to remote code execution.
This vulnerability allows a local attacker to execute arbitrary code by placing a crafted DLL in an unsafe directory, potentially leading to unauthorized access and control of the GV-ASManager process.
The flaw involves an embedded RSA private key in the Lighttpd web server firmware, allowing attackers to decrypt HTTPS traffic and spoof the server, compromising confidentiality and integrity.
The flaw involves an embedded RSA private key in the Lighttpd web server firmware, allowing attackers to decrypt HTTPS traffic and spoof the server, compromising confidentiality and integrity.
This vulnerability allows an attacker to free a transport structure in the SCTP stack, leading to potential denial of service or other attacks by exploiting the dangling pointer issue.
This vulnerability in the Linux kernel's rhashtable implementation allows a use-after-free condition, leading to potential crashes or exploitation by an attacker with local access.
This vulnerability allows an attacker to potentially free a shadow VMCS prematurely, leading to a race condition that could result in the kernel memory being freed while the vCPU is still using it, potentially leading to a denial of service or other kernel-level issues.