All CVEs — page 8 of 1220
The complete archive, 25 per page, newest first. 30483 records. Search instead.
The Basel Post Types WordPress plugin (≤1.18) contains a missing-quotes bug in a PHP `defined()` call for `SECURE_AUTH_SALT`, causing authentication bypass via a hardcoded, publicly exposed salt value. This allows unauthenticated attackers to forge valid Opauth callbacks and authenticate as any user—including admins—without credentials or MFA.
The Zephyr HTTP/2 server incorrectly reused the per-connection receive buffer's remaining byte count (data_len) as a file size when serving static files, allowing unauthenticated attackers to cause heap or stack buffer overflows by sending specially crafted HTTP/2 frames that exceed the fixed buffer size. This occurs because data_len is overwritten with the on-disk file size and never reset, corrupting frame parsing state and enabling arbitrary memory writes.