CWE-290
CVEs classified under CWE-290, newest first.
272 CVEsRSS
CVE-2018-5353Critical· 9.8PoCThe custom GINA/CP module in Zoho ManageEngine ADSelfService Plus before 5.5 build 5517 allows remote attackers to execute code and escalate privileges via spoofing
The custom GINA/CP module in Zoho ManageEngine ADSelfService Plus before 5.5 build 5517 allows remote attackers to execute code and escalate privileges via spoofing. It does not authenticate the intended server before opening a browser w…
▾ Abyssalzohocorp · manageengine_adselfservice_plusEPSS 11%via NVD
CVE-2018-7160High· 8.8⚖ disputedThe Node.js inspector, in 6.x and later is vulnerable to a DNS rebinding attack which could be exploited to perform remote code execution
The Node.js inspector, in 6.x and later is vulnerable to a DNS rebinding attack which could be exploited to perform remote code execution. An attack is possible from malicious websites open in a web browser on the same computer, or anoth…
▾ Twilightnodejs · node.jsEPSS 9.5%via NVD