All CVEs — page 665 of 678
The complete archive, 25 per page, newest first. 16938 records. Search instead.
The flaw is a blind SQL Injection vulnerability in the TableOn plugin for WordPress, allowing unauthenticated attackers to extract sensitive database information by manipulating the `filter_data[comment_count]` parameter.
The flaw allows unauthenticated attackers to access sensitive page and post content via WordPress REST API endpoints, despite global privacy settings.
HashBrown CMS through 1.4.6 allows attackers to inject OS commands via the branch parameter, leading to potential remote code execution.
HashBrown CMS through 1.4.6 allows attackers to execute arbitrary system commands via crafted file uploads, due to improper handling of the thumbnail generation process.
The flaw allows a pre-authentication attacker to cause a StackOverflowError through type nesting, potentially leading to denial of service.
The flaw allows an authenticated attacker to cause excessive resource usage by controlling the number of transfer frames per incoming delivery, potentially leading to a denial of service.
The flaw allows a pre-authentication attacker to cause a StackOverflowError through type nesting, potentially leading to denial of service.
The flaw allows a pre-authentication attacker to cause a StackOverflowError through type nesting, potentially leading to denial of service.