All CVEs — page 658 of 678
The complete archive, 25 per page, newest first. 16938 records. Search instead.
The vulnerability in Unbound up to 1.26.0 allows an attacker to cause a denial of service or execute remote code through a maliciously crafted DNSKEY, due to improper handling of DNSKEY RDATA.
This flaw allows a malicious authenticated client to execute arbitrary code with root privileges on the switch via a specially crafted request to the gRPC Network Management Interface (gNMI). This is a high-risk vulnerability due to the potential for complete system compromise.
This flaw allows an authenticated user to use the wrong privilege level for gRPC requests to OpenConfig, potentially leading to unauthorized access. It matters because it can bypass intended authorization controls.
This flaw allows a specially crafted request to modify an account's properties, potentially granting unauthorized elevated privileges. It matters because it can lead to unauthorized access and privilege escalation without proper mitigation.
The flaw is an XML External Entity (XXE) injection vulnerability in IBM QRadar, allowing unauthorized access to sensitive information through improperly processed XML-formatted syslog events.
The flaw allows a malicious TLS server to cause a memory leak in a client that checks OCSP responses, potentially leading to Denial of Service.
The flaw allows any authenticated user to overwrite files and subscribe to WebSocket events, enabling data exfiltration and poisoning.
The flaw in Keycloak's Dynamic Client Registration (DCR) component allows attackers to write values to sensitive claim locations, potentially forging administrative roles and gaining full administrative control over the realm.
The flaw in Keycloak's PathMatcher allows attackers to bypass intended security policies by manipulating URL paths, potentially gaining unauthorized access to administrative or restricted areas.
This vulnerability allows a local, low-privileged attacker to escalate privileges to SYSTEM by creating a symlink/junction during the uninstallation of CCleaner prior to 7.10.1464, which CCleaner follows when deleting the application's data folder with elevated integrity.
The flaw allows unauthenticated attackers to modify and disclose data through REST API endpoints due to lack of proper permission checks.