All CVEs — page 948 of 961
The complete archive, 25 per page, newest first. 24011 records. Search instead.
The flaw allows unauthenticated attackers to access sensitive page and post content via WordPress REST API endpoints, despite global privacy settings.
HashBrown CMS through 1.4.6 allows attackers to inject OS commands via the branch parameter, leading to potential remote code execution.
HashBrown CMS through 1.4.6 allows attackers to execute arbitrary system commands via crafted file uploads, due to improper handling of the thumbnail generation process.
The flaw allows a pre-authentication attacker to cause a StackOverflowError through type nesting, potentially leading to denial of service.
The flaw allows an authenticated attacker to cause excessive resource usage by controlling the number of transfer frames per incoming delivery, potentially leading to a denial of service.
The flaw allows a pre-authentication attacker to cause a StackOverflowError through type nesting, potentially leading to denial of service.
The flaw allows a pre-authentication attacker to cause a StackOverflowError through type nesting, potentially leading to denial of service.