All CVEs — page 905 of 912
The complete archive, 25 per page, newest first. 22791 records. Search instead.
The flaw allows users to bypass global routability checks by embedding IPv4 addresses in transition encodings within a NAT64 gateway, potentially exposing internal network responses.
The vulnerability allows an attacker to exchange an OAuth access token for a session token, potentially gaining unauthorized access to the platform.
The flaw allows an authenticated user to use JavaScript to access blocked internal addresses, potentially exposing sensitive data in web-search or RAG output.
The vulnerability allows for authentication bypass in H3C NX15 V100R017 through manipulation of an API endpoint, leading to potential unauthorized access.
The flaw allows a remote unauthenticated actor to execute arbitrary code by manipulating the project directory path, bypassing workspace trust protections.
The flaw in Kiro IDE allows a remote unauthenticated actor to execute arbitrary code by manipulating the project directory path, bypassing workspace trust protections.
The flaw allows an authenticated attacker to execute arbitrary operating system commands as a privileged user in Lenovo XClarity Orchestrator 2.2.0, posing a significant risk of unauthorized access and control over the system.
The flaw allows attackers to inject malicious SQL queries via a GET parameter, potentially leading to unauthorized data deletion and extraction.
Atlas-Livre has an improper access control vulnerability that allows unauthenticated attackers to bypass session-based authentication and execute admin actions, potentially leading to data deletion.