All CVEs — page 632 of 634
The complete archive, 25 per page, newest first. 15848 records. Search instead.
The flaw allows unauthenticated command injection, enabling attackers to execute arbitrary OS commands and achieve root-level code execution, compromising the device.
The flaw allows unauthenticated attackers to access device functions by sending protocol-conforming packets over TCP port 23456, leading to unauthorized access to live video streams and control of device features.
The vulnerability allows code injection due to an unknown function in the Python Validation Handler, enabling remote attackers to exploit it for RCE. This matters because it can lead to unauthorized access and control of affected systems.
A missing authorization vulnerability in HAVELSAN Inc. Liman MYS allows privilege escalation, enabling unauthorized users to perform actions with elevated privileges.
The flaw allows a remote peer to cause a use-after-free condition by disconnecting during an in-flight ATT PDU, leading to potential crashes.
The flaw is a stack-based out-of-bounds read vulnerability in stunnel's 's_vlog' function when handling oversized log messages. This can lead to crashes and potentially replace trailing newline characters with null bytes.
The flaw is a missing authorization vulnerability that allows unauthorized access to functionality not properly constrained by ACLs, potentially enabling attackers to perform actions they should not be able to.
The flaw allows for SQL injection by directly concatenating user-controlled parameters into SQL queries, leading to potential data compromise, manipulation, and system disruption.
The flaw allows an authenticated staff user with reports module permission to inject arbitrary SQL, potentially reading sensitive data from various tables.
The flaw allows an attacker to inject SQL code by manipulating user-controlled parameters, leading to potential data compromise, integrity issues, and availability problems.
The flaw allows an attacker to inject SQL commands by manipulating the Line and Column parameters, leading to potential data manipulation or system compromise.
The flaw allows an attacker to inject SQL commands by manipulating user-controlled Filter request parameters, leading to potential data manipulation or system compromise.
The flaw allows remote unauthenticated clients to exhaust server memory by sending incomplete message chunks and disconnecting repeatedly, potentially crashing the server.
The flaw allows anonymous clients to access diagnostics nodes without proper authorization, exposing sensitive security information. This matters because it can lead to unauthorized access to critical system details.
The flaw allows an anonymous or low-privileged client to execute a denied method by batching it with an allowed one, bypassing authorization checks.
The flaw allows an unauthenticated remote client to exhaust monitored-item quotas by triggering a `StackOverflowError` during PubSub ExtensionObject decoding, leading to denial of service for monitored item creation.
The flaw allows an attacker to perform a padding oracle attack on RSA PKCS#1 v1.5 padding in `Basic128Rsa15`-encrypted username tokens, enabling password recovery and unauthorized access.
The flaw allows an anonymous client to read role-permission metadata, invoke protected methods, or delete protected nodes on servers that rely on role permissions and use the `copy()` method to construct the running configuration, potentially leading to unauthorized access.
The flaw involves information disclosure in Firefox for Android and Firefox Focus for Android, potentially exposing sensitive user data.
The flaw allows external control of file names or paths in pardus-image-writer before version 0.9.0, potentially leading to removal of important client functionality.
A stack-based buffer overflow vulnerability in the Autodesk FBX SDK allows attackers to execute arbitrary code by parsing a maliciously crafted FBX file.