All CVEs — page 640 of 678
The complete archive, 25 per page, newest first. 16938 records. Search instead.
The vulnerability in LMDeploy allows remote code execution due to improper deserialization of messages, posing a critical risk.
The flaw is an Improper Authentication vulnerability in Dell ObjectScale versions prior to 4.4.0.0, allowing unauthenticated attackers to gain unauthorized access. This matters because it can lead to significant data breaches and unauthorized system control.
This vulnerability allows unauthenticated attackers to execute arbitrary HTTP requests, potentially leading to unauthorized access to internal endpoints and cloud metadata services.
The flaw in @fastify/proxy-addr allows unauthenticated clients to manipulate the X-Forwarded-For header, bypassing IP-based access control, rate limiting, geolocation, and audit logging.
The flaw allows an attacker to bypass authentication checks by manipulating the order of AND groups in the Fastify plugin configuration, potentially granting unauthorized access.
The flaw allows an authenticated user to execute arbitrary code by manipulating the mkdocs.yml configuration, posing a significant security risk.
The flaw allows an authenticated user to bypass authorization and invoke any DWR method, leading to potential unauthorized access to restricted functionalities.
The flaw allows an attacker with low privileges to execute arbitrary code via the Scripting Sandbox Bypass in ScadaLTS 2.8.1-release-candidate build 0, due to lack of authorization checks.