All CVEs — page 900 of 912
The complete archive, 25 per page, newest first. 22791 records. Search instead.
The flaw allows a pre-authentication attacker to cause a StackOverflowError through type nesting, potentially leading to denial of service.
The flaw allows a pre-authentication attacker to cause a StackOverflowError through type nesting, potentially leading to denial of service.
The flaw allows local attackers to exploit misconfigured PostgreSQL service command injection vulnerabilities to gain full root access on affected devices.
This flaw allows any authenticated user with Contributor-level access or higher to retrieve email addresses of all registered users, including administrators, due to lack of proper user restriction checks in GeoDirectory WordPress plugin versions before 2.8.168.
The flaw allows unauthenticated users to delete arbitrary files, leading to potential full site takeover.
The flaw allows unauthenticated users to bypass registration restrictions set by administrators, enabling account creation even when open registration is disabled.
The flaw allows an authenticated vendor to manipulate other vendors' stores on the marketplace due to inadequate verification of store ownership.
The flaw allows unauthenticated users to view password-protected content without entering a password, compromising data confidentiality.
The flaw allows unauthenticated users to access protected content via the WordPress REST API, bypassing category-based restrictions.
The flaw allows unauthenticated users to access non-public post content via an unsecured REST endpoint in Passster WordPress plugin versions before 4.3.6.
The flaw allows unauthenticated attackers to upload a malicious SVG file containing JavaScript, leading to Stored Cross-Site Scripting (XSS). This matters because it can enable arbitrary code execution in users' browsers when they view the affected site.
The flaw allows unauthenticated users to access private image comments through a vulnerable AJAX action in Sunshine Photo Cart WordPress plugin versions prior to 3.6.12, compromising privacy and security.
The flaw allows direct authentication cookie issuance post-password check, bypassing security measures and enabling unthrottled password guessing.
The flaw allows an attacker to rebind a user's second factor to their own account if they know the user’s password, enabling unauthorized access.