All CVEs — page 671 of 678
The complete archive, 25 per page, newest first. 16938 records. Search instead.
The vulnerability allows an attacker to exchange an OAuth access token for a session token, potentially gaining unauthorized access to the platform.
The flaw allows an authenticated user to use JavaScript to access blocked internal addresses, potentially exposing sensitive data in web-search or RAG output.
The vulnerability allows for authentication bypass in H3C NX15 V100R017 through manipulation of an API endpoint, leading to potential unauthorized access.
The flaw allows a remote unauthenticated actor to execute arbitrary code by manipulating the project directory path, bypassing workspace trust protections.
The flaw in Kiro IDE allows a remote unauthenticated actor to execute arbitrary code by manipulating the project directory path, bypassing workspace trust protections.
The flaw allows an authenticated attacker to execute arbitrary operating system commands as a privileged user in Lenovo XClarity Orchestrator 2.2.0, posing a significant risk of unauthorized access and control over the system.
The flaw allows attackers to inject malicious SQL queries via a GET parameter, potentially leading to unauthorized data deletion and extraction.
Atlas-Livre has an improper access control vulnerability that allows unauthenticated attackers to bypass session-based authentication and execute admin actions, potentially leading to data deletion.
The flaw allows authenticated attackers to crash SnailJob 1.7.0 servers by sending a specially crafted payload, leading to an OutOfMemoryError due to unbounded array allocation.