All CVEs — page 735 of 854
The complete archive, 25 per page, newest first. 21350 records. Search instead.
Pake applications allow any HTTPS content to invoke native commands due to misconfigured IPC settings and lack of proper access control, posing a significant risk to application security.
This vulnerability allows attackers with JavaScript execution (XSS) to gain read/write access to an entire directory tree through a file or folder picker in a Tauri application, posing a significant security risk.
The flaw allows arbitrary script execution when an application includes data: or blob: in its script-src directive, despite the presence of a nonce in the Content Security Policy, posing a significant security risk.
The WordPress plugin 'Rename wp-login.php to anything you want' contains a time-based SQL injection vulnerability in its 'log' parameter that allows unauthenticated attackers to extract database information without needing credentials. This affects all versions up to 2.0.1.