All CVEs — page 877 of 884
The complete archive, 25 per page, newest first. 22083 records. Search instead.
The vulnerability allows for authentication bypass in H3C NX15 V100R017 through manipulation of an API endpoint, leading to potential unauthorized access.
The flaw allows a remote unauthenticated actor to execute arbitrary code by manipulating the project directory path, bypassing workspace trust protections.
The flaw in Kiro IDE allows a remote unauthenticated actor to execute arbitrary code by manipulating the project directory path, bypassing workspace trust protections.
The flaw allows an authenticated attacker to execute arbitrary operating system commands as a privileged user in Lenovo XClarity Orchestrator 2.2.0, posing a significant risk of unauthorized access and control over the system.
The flaw allows attackers to inject malicious SQL queries via a GET parameter, potentially leading to unauthorized data deletion and extraction.
Atlas-Livre has an improper access control vulnerability that allows unauthenticated attackers to bypass session-based authentication and execute admin actions, potentially leading to data deletion.
The flaw allows authenticated attackers to crash SnailJob 1.7.0 servers by sending a specially crafted payload, leading to an OutOfMemoryError due to unbounded array allocation.
The flaw is a stack-based buffer overflow in Keysight IxChariot Endpoint, allowing unauthenticated remote attackers to execute arbitrary code with administrative privileges. This vulnerability is critical due to its high impact on system integrity and availability.
The flaw involves a use after free vulnerability in vpu_ioctl.c, allowing remote escalation of privilege without additional execution privileges. This is critical as it can be exploited by attackers to gain full control over the system.