All CVEs — page 719 of 854
The complete archive, 25 per page, newest first. 21350 records. Search instead.
SQL Injection vulnerability allows attackers to execute arbitrary SQL commands, potentially leading to data theft or corruption.
The flaw is an Improper Authentication vulnerability in DIAEnergie that allows Authentication Bypass, enabling unauthorized access to the system. This matters because it can lead to significant data compromise and operational disruption.
The eesy_ID2WP plugin allows unauthenticated attackers to read arbitrary files on the server through a path traversal vulnerability in the id2wp_path parameter. This could expose sensitive configuration files, database credentials, or other confidential data.