All CVEs — page 749 of 854
The complete archive, 25 per page, newest first. 21350 records. Search instead.
The flaw allows a permitted Confluence MCP caller to upload a file as an attachment, potentially disclosing data readable by the server process.
The flaw allows a network client to invoke Atlassian tools as the operator due to unverified user identity, posing a critical risk.
The flaw allows a client to invoke hidden tools despite configured least-privilege restrictions, leading to potential unauthorized access to read, write, or delete operations.
The flaw allows attackers to bypass SSRF protections by exploiting a DNS resolution timing window where a public DNS record is used during validation but a private/internal record is used during connection, enabling access to internal services and metadata endpoints. This affects Atlassian's MCP server in Confluence and Jira.
The flaw is an Incorrect Authorization vulnerability in Adobe Campaign Classic that allows arbitrary code execution. This matters because it can lead to full system compromise without user interaction.
The flaw is an Incorrect Authorization vulnerability in Adobe Campaign Classic that allows arbitrary code execution, posing a critical risk.
The flaw is an Improper Control of Generation of Code vulnerability in Adobe Campaign Classic that allows arbitrary code execution, posing a critical risk.
The flaw is an Improper Control of Generation of Code vulnerability in Adobe Campaign Classic that allows for arbitrary code execution, posing a critical risk.
The vulnerability allows an attacker to inject arbitrary code, potentially leading to full system compromise without user interaction.
This vulnerability allows an attacker to inject arbitrary code, leading to potential arbitrary code execution in the context of the current user, which could result in significant damage.
A missing authorization check in Softaculous Virtualizor's billing module allows attackers to bypass authentication and modify any tenant's account balance through crafted API requests. This vulnerability could lead to unauthorized financial transactions and potential service suspension of targeted accounts.
The flaw is a PHP object injection vulnerability in the billing module handler of Softaculous Virtualizor, allowing unauthenticated attackers to execute arbitrary code as root. This vulnerability matters because it provides a high-risk vector for remote code execution, potentially leading to complete system compromise.
This vulnerability allows unauthenticated attackers to execute arbitrary commands as root by exploiting a flaw in the billing module handler, leading to complete control of the host and managed VPS instances.