All CVEs — page 747 of 854
The complete archive, 25 per page, newest first. 21350 records. Search instead.
The vulnerability allows heap-based buffer overflow, leading to arbitrary code execution. This can be exploited if a user opens a malicious file, posing a significant risk.
The vulnerability allows an out-of-bounds write that could result in arbitrary code execution, posing a high risk to users who open malicious files.
The vulnerability allows an out-of-bounds write that could result in arbitrary code execution, posing a significant risk to users who open malicious files.
The Uncontrolled Recursion vulnerability in Bridge allows an attacker to execute arbitrary code, posing a high risk to user systems.
The flaw is a heap-based buffer overflow in Bridge, which could allow an attacker to execute arbitrary code with the privileges of the current user. This matters because it can lead to unauthorized access and potentially full system compromise.
The CAI Content Credentials application has an Uncontrolled Resource Consumption vulnerability that allows attackers to exhaust system resources and cause a denial-of-service condition without requiring any user interaction. This flaw enables an attacker to consume excessive CPU or memory resources, leading to application unavailability.
A vulnerability exists in plone.app.portlets.portlets where user-supplied template fields can be exploited to execute arbitrary code, allowing any authenticated user to escalate privileges.
The flaw allows remote unauthenticated attackers to bypass IP-based throttling by manipulating the X-Forwarded-For header, leading to potential unauthorized access to admin functionalities.
The flaw is an Improper Limitation of a Pathname to a Restricted Directory vulnerability in Adobe Connect, allowing attackers to access sensitive files outside the intended access scope. This matters because it can lead to unauthorized access to critical information without user interaction.
The CAI Content Credentials system has an input validation flaw that allows attackers to bypass security controls and gain unauthorized write access without requiring user interaction. This represents a significant security bypass vulnerability.
The flaw allows any IAM principal with lambda:InvokeFunction permission to escalate privileges and perform unauthorized AWS API operations, bypassing explicit IAM denials.
MikroTik RouterOS devices are vulnerable to a crash condition in the BGP service due to improper validation of VPN NLRI prefix lengths, allowing an unauthenticated attacker to cause indefinite BGP session disruptions without sending a NOTIFICATION message.
The vulnerability allows a low-privileged attacker to execute arbitrary code, posing a significant risk to the system's security.