All CVEs — page 725 of 854
The complete archive, 25 per page, newest first. 21350 records. Search instead.
The flaw allows unauthenticated attackers to open RDP connections without completing the handshake and hold onto connection slots indefinitely, eventually exhausting all available connections and preventing legitimate users from connecting.
A missing authorization check in Loops & Logic plugin versions 4.2.4 and earlier allows unauthenticated users to access restricted administrative functions. This represents a significant security gap that could enable unauthorized access to sensitive data and system controls.
This flaw allows unauthenticated attackers to inject SQL commands, potentially leading to data theft or manipulation.
A SQL injection vulnerability in Ultimeter's editor component allows authenticated attackers to execute arbitrary SQL commands against the application's database. This could lead to data theft, unauthorized access to sensitive information, and potential database compromise.