All CVEs — page 639 of 678
The complete archive, 25 per page, newest first. 16938 records. Search instead.
The Dell Update Package Framework prior to 26.07.03 has an Unchecked Return Value vulnerability, allowing a low-privileged attacker with local access to potentially gain higher privileges.
The flaw allows a malicious archive to overwrite files outside the intended directory, potentially enabling code execution.
CVE-2026-20331 involves protection mechanism failures that could allow attackers to exploit vulnerabilities in Cisco Secure products, leading to potential high impact issues.
This vulnerability allows an attacker to execute arbitrary commands on the underlying operating system of a Cisco ISE device by exploiting insecure deserialization of a Java byte stream, potentially leading to privilege escalation and denial of service.
This vulnerability allows an attacker to perform command injection attacks and elevate privileges to root through the REST API of Cisco ISE and ISE-PIC, leading to potential system compromise and DoS conditions.
This vulnerability allows an attacker to perform command injection attacks and elevate privileges to root through the web-based management interface of Cisco ISE and ISE-PIC, leading to potential code execution and denial of service.
CVE-2026-20234 involves insufficiently protected credentials, a critical flaw that could allow unauthorized access to sensitive information and systems.
This vulnerability allows for os command injection through manipulation of the argument data.url, leading to potential remote code execution.
Sentry Seer is vulnerable to a multi-stage trust-boundary violation allowing unauthenticated attackers to execute arbitrary code through crafted telemetry events.
Dell ObjectScale versions prior to 4.4.0.0 are vulnerable to Deserialization of Untrusted Data, allowing unauthenticated attackers to execute remote code.
The flaw in djust prior to version 1.0.7 allows unauthorized access to tenant-specific data over WebSocket/SSE connections, due to improper tenant isolation.
The flaw in djust allows cross-origin requests to drive a victim-cookie-authenticated session, enabling state-changing events to be triggered as the victim.