All CVEs — page 892 of 912
The complete archive, 25 per page, newest first. 22791 records. Search instead.
This flaw allows an attacker to maintain access to a user's account after their password is reset, due to improper session cleanup.
The vulnerability in Unbound up to 1.26.0 allows an attacker to cause a denial of service or execute remote code through a maliciously crafted DNSKEY, due to improper handling of DNSKEY RDATA.
This flaw allows a malicious authenticated client to execute arbitrary code with root privileges on the switch via a specially crafted request to the gRPC Network Management Interface (gNMI). This is a high-risk vulnerability due to the potential for complete system compromise.
This flaw allows an authenticated user to use the wrong privilege level for gRPC requests to OpenConfig, potentially leading to unauthorized access. It matters because it can bypass intended authorization controls.
This flaw allows a specially crafted request to modify an account's properties, potentially granting unauthorized elevated privileges. It matters because it can lead to unauthorized access and privilege escalation without proper mitigation.
The flaw is an XML External Entity (XXE) injection vulnerability in IBM QRadar, allowing unauthorized access to sensitive information through improperly processed XML-formatted syslog events.
The flaw allows a malicious TLS server to cause a memory leak in a client that checks OCSP responses, potentially leading to Denial of Service.
The flaw allows any authenticated user to overwrite files and subscribe to WebSocket events, enabling data exfiltration and poisoning.
The flaw in Keycloak's Dynamic Client Registration (DCR) component allows attackers to write values to sensitive claim locations, potentially forging administrative roles and gaining full administrative control over the realm.