All CVEs — page 899 of 912
The complete archive, 25 per page, newest first. 22791 records. Search instead.
The flaw allows an attacker to manipulate TwoFA settings without proper authorization, posing a significant security risk.
The flaw allows attackers to upload executable PHP files via a restricted but incomplete blacklist in file names, potentially leading to remote code execution.
The flaw allows unauthenticated attackers to modify post data, including title, content, and status, by exploiting a missing capability check in the `create_post()` function.
The flaw is a blind SQL Injection vulnerability in the TableOn plugin for WordPress, allowing unauthenticated attackers to extract sensitive database information by manipulating the `filter_data[comment_count]` parameter.
The flaw allows unauthenticated attackers to access sensitive page and post content via WordPress REST API endpoints, despite global privacy settings.
HashBrown CMS through 1.4.6 allows attackers to inject OS commands via the branch parameter, leading to potential remote code execution.
HashBrown CMS through 1.4.6 allows attackers to execute arbitrary system commands via crafted file uploads, due to improper handling of the thumbnail generation process.
The flaw allows a pre-authentication attacker to cause a StackOverflowError through type nesting, potentially leading to denial of service.
The flaw allows an authenticated attacker to cause excessive resource usage by controlling the number of transfer frames per incoming delivery, potentially leading to a denial of service.
The flaw allows a pre-authentication attacker to cause a StackOverflowError through type nesting, potentially leading to denial of service.