All CVEs — page 751 of 854
The complete archive, 25 per page, newest first. 21350 records. Search instead.
Aureus ERP before 1.5.0 allows authenticated users to access arbitrary messages by submitting sequential message IDs, leading to unauthorized access and potential data exposure.
The Concrete CMS Community Store has a predictable token generation flaw where download tokens are based on timestamps instead of random values, allowing attackers to calculate valid tokens for other customers' digital products.
The rpcbind service suffers from a memory exhaustion vulnerability where unbounded in-memory lists grow continuously with each unique RPC request, leading to DoS conditions that can exhaust system resources and degrade service availability.
This vulnerability allows authenticated attackers to write arbitrary data to any location on the device's filesystem, leading to remote code execution by exploiting a path traversal flaw in the web management portal upload endpoint.
This vulnerability allows unauthenticated attackers to read sensitive configuration files and upload files to arbitrary locations, leading to remote code execution.
The flaw allows unauthenticated attackers to derive valid session tokens and bypass security checks, leading to unauthorized access and potential device control.
The flaw allows authenticated attackers with services permission to execute arbitrary shell commands as root, leading to complete loss of confidentiality, integrity, and availability.