All CVEs — page 974 of 988
The complete archive, 25 per page, newest first. 24697 records. Search instead.
The flaw allows arbitrary function execution via an unfiltered user input parameter, enabling authenticated attackers with Administrator-level access to run any PHP code.
This vulnerability in the Linux kernel allows a race condition where a per-socket policy change can race with a send operation, leading to a double-free of the socket's dst cache, potentially causing a kernel crash or denial of service.
The vulnerability in the Linux kernel's xfrm6 module allows for a double netdev_put underflow, potentially leading to a denial of service or other kernel issues.
This vulnerability allows a remote client to perform a slab-out-of-bounds read by crafting a compound SMB2 request, potentially leading to information disclosure.
This vulnerability in the Linux kernel's GTP (Generic Tunneling Protocol) implementation allows a malicious packet with specific payload to cause a kernel panic by triggering an invalid memory access.
The flaw is a potential general protection fault due to uninitialized netlink_ext_ack pointer dereferencing in the Linux kernel's nexthop module. This matters because it could lead to a kernel panic or system instability if exploited.
The flaw allows a null pointer dereference in the Linux kernel, potentially leading to a system crash or denial of service.
The flaw involves a use-after-free vulnerability in the Linux kernel's mac80211 subsystem, where debugfs entries are not properly removed when adding new links, leading to potential memory corruption.
This vulnerability in the Linux kernel's mac80211 subsystem can lead to a double-free error, which may result in a kernel crash or denial of service.
This vulnerability in the Linux kernel's mac80211 subsystem can lead to a double-free condition, which could result in a kernel crash or potentially other issues.
This flaw allows an attacker to manipulate the free space cache in the Btrfs file system, leading to potential memory corruption or other issues when the cache is loaded with more entries than the allocated pages can hold.
This flaw in the Linux kernel's xfrm: iptfs module allows for memory corruption when handling fragmented packets, leading to potential kernel panics.
A stack-based buffer overflow vulnerability exists in Apache Lucy, which could lead to remote code execution if exploited.
The flaw is a memory allocation vulnerability in Apache Lucy that allows for excessive size values, potentially leading to denial of service or other issues. This matters because it can be exploited if an attacker can manipulate input sizes.
The flaw is a deserialization vulnerability in Apache Lucy, allowing attackers to execute arbitrary code. This matters because it can lead to complete system compromise.
Uncontrolled recursion vulnerability in Apache Lucy allows attackers to cause a denial of service by triggering excessive memory consumption.
The vulnerability allows unauthenticated attackers to delete any media attachment in the WordPress media library by exploiting missing capability checks in the `plupload_ajax_delete_file()` function.