All CVEs — page 631 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
This flaw allows an attacker to cause a kernel memory corruption by exploiting an invalid root page fault after MMU pages are made available for the shadow MMU, potentially leading to a system crash or privilege escalation.
The flaw allows a multisite subsite administrator to inject and execute arbitrary PHP code by not properly escaping user-supplied text, posing a significant security risk.
The flaw allows unauthenticated users to upload executable PHP files, leading to remote code execution due to improper file validation.
The flaw allows contributors to inject malicious scripts into podcast episode settings, leading to cross-site scripting attacks even when HTML filtering is disabled.
The flaw allows users with Contributor role or higher to inject arbitrary scripts by manipulating featured-image focal-point coordinates, potentially leading to cross-site scripting (XSS) attacks.
The flaw allows unauthenticated attackers to list, download, and upload files across the connected Dropbox account, and read connected account and administrator email addresses, due to missing authorization checks in the Easy Integration for Dropbox WordPress plugin before 2.2.0.
The flaw allows users with Contributor-level access or higher to perform Server-Side Request Forgery (SSRF) attacks, enabling them to retrieve sensitive cloud instance metadata, including IAM credentials.
The flaw allows SQL injection due to improper parameter sanitization in certain WordPress plugins, enabling administrators or users with specific capabilities to execute arbitrary database commands.
The flaw allows unauthenticated attackers to forge cookie-consent records and flood privacy-request queues, potentially leading to data misuse.