All CVEs — page 673 of 678
The complete archive, 25 per page, newest first. 16938 records. Search instead.
The vulnerability in NVIDIA Dynamo for Linux allows an attacker to perform an out-of-bounds write, potentially leading to denial of service and data tampering.
This flaw allows an authenticated user to bypass security controls by crafting specific content in conversation messages, potentially executing unauthorized tools.
A security flaw in Trippo ResponsiveFilemanager up to 9.14.0 allows unrestricted file uploads due to an unknown vulnerability in filemanager/dialog.php, posing a significant risk.
Multiple vulnerabilities in the REST API interface of HPE Networking SD-WAN Orchestrator allow unauthenticated attackers to bypass web authentication and access sensitive system functions, posing a significant risk.
Multiple vulnerabilities in the REST API interface of HPE Networking SD-WAN Orchestrator allow unauthenticated attackers to bypass web authentication and access sensitive functions, potentially leading to data theft or system compromise.
The flaw in Node.js HTTP/2 handling can lead to a heap-use-after-free condition when `nghttp2_session_mem_send()` is called re-entrantly while `nghttp2_session_mem_recv()` is executing, which could allow attackers to crash the application or execute arbitrary code.
The vulnerability allows NoSQL injection by passing unvalidated checkpoint identifiers into MongoDB queries, potentially leaking sensitive data across tenants.