All CVEs — page 731 of 854
The complete archive, 25 per page, newest first. 21350 records. Search instead.
The flaw allows a client to substitute their identity into MQTT topic filters, potentially gaining unauthorized access to other tenants' data. This is due to direct substitution of client ID and username values into pattern-based ACL rules.
A vulnerability in PgBouncer allows unauthenticated attackers to cause a denial of service by triggering an integer overflow in packet buffer growth logic, leading to infinite loops that consume CPU resources and stall all client connections.
A missing validation check in PgBouncer's SCRAM authentication parser allows remote attackers to crash the service by sending a malformed client-final-message, causing a NULL pointer dereference that terminates all pooled connections. This vulnerability affects all versions up to 1.25.2 and can be exploited without any valid credentials.
This vulnerability allows an attacker to execute arbitrary code via SQL injection in the Moodle Socialwall plugin versions 3.0 to 3.3, posing a critical risk.
Photoview 2.4.0 contains an SQL injection vulnerability in its album download route that allows unauthenticated attackers to extract arbitrary database data using time-based or blind injection techniques.
The flaw allows server-side template injection, enabling arbitrary Python code execution and OS command execution, posing a significant security risk.
The flaw allows a remote attacker to manipulate database queries, potentially leading to data integrity issues or unauthorized data access.
The flaw allows a malicious actor to inject script into stored network acknowledgement data, leading to session hijacking and unauthorized actions.
The flaw allows unauthenticated remote code execution via Java native deserialization on the PayDir Business Rules Manager RMI SSL endpoint, posing a significant security risk.