All CVEs — page 637 of 678
The complete archive, 25 per page, newest first. 16938 records. Search instead.
AVideo LoginControl has an authentication bypass vulnerability due to loose equality comparison against an uninitialized session variable, allowing attackers with a victim's password to bypass the second factor.
A vulnerability exists in the Username input handling of the Quick Security Setup Handler, allowing remote attackers to exploit improper input validation, leading to potential system compromise.
This flaw is a stack-based buffer overflow in the /usr/sbin/auth_user_pass script, allowing unauthenticated attackers to potentially execute arbitrary code as root via a crafted authentication request.
The flaw is an OS command injection vulnerability in the xtremed daemon, allowing unauthenticated remote attackers to execute arbitrary commands as root via the AuthFormServlet endpoint.
This vulnerability allows an unauthenticated attacker to exploit a hard-coded cryptographic key, leading to unauthorized access to Dell OpenManage Server Administrator versions prior to 11.1.0.3.
This vulnerability allows unauthenticated attackers to inject OS commands, potentially leading to remote code execution. It matters because it can be exploited to gain full control over the affected system without any authentication.
This vulnerability allows unauthenticated attackers to remotely execute code, posing a significant risk to server security.
This flaw allows unsanitized user input to be executed as SQL statements, enabling attackers to perform arbitrary actions within the victim's Snowflake session.