405,224 results · Feed
-
Medium 6.0
On affected platforms running Arista EOS with VPLS-BGP enabled, an attacker who has established a BGP session with the …
-
High 7.1
On affected platforms running Arista EOS with 802.1X with Dynamic Host Configuration Protocol (DHCP) device profiling e…
-
Medium 6.0
On affected Arista EOS platforms running Border Gateway Protocol with Link State ( BGP-LS) and configured with the Dyna…
-
Low 2.0
On affected platforms running Arista EOS with automatic certificate management configured and automatic Certificate Aut…
-
High 7.0
On affected platforms running Arista EOS with IEEE 802.1X authentication and MACsec using dynamically derived keys, sen…
-
Critical 9.4
Arista C-260 and C-250 access points ship with fleet-wide static cryptographic keys used for firmware image verificatio…
-
Medium 6.9
On affected platforms running Arista EOS with IPsec AutoVPN Feature configured with dynamic paths, the configured IPsec…
-
Medium 4.3
Winter: My Account preview exposes another backend user's profile by record ID
Winter CMS is a content management system built on the Laravel PHP framework. From 1.2.13 until 1.2.14, the Backend\Controllers\MyAccount controller inherits the FormController actions create, update, and preview while declaring an empty $requiredPermissions …
-
High 7.1
An issue in MongoDB server’s aggregation framework allows an authenticated user with read privileges to cause a denial …
-
Low 2.0
Winter CMS: Stored XSS through Backend List widget image columns
Winter CMS is a content management system built on the Laravel PHP framework. From 1.1.0 until 1.2.14, Backend\Widgets\Lists::evalImageTypeValue() interpolates the result of ImageResizer::filterGetUrl() into a single-quoted image source attribute without esca…
-
Medium 6.1
A use-after-free read issue exists in MongoDB’s SBE (Slot-Based Execution) engine when processing aggregation pipelines…
-
Critical 9.1
An issue exists in MongoDB's macOS TLS client implementation where certificate chain-of-trust validation is bypassed fo…
-
Medium 4.5
Winter: Reflected XSS through the search query parameter in the backend Table widget
Winter CMS is a content management system built on the Laravel PHP framework. From 1.0.420 until 1.2.14, the backend Table widget partial modules/backend/widgets/table/partials/_table.php emits the search query parameter without HTML encoding inside a script …
-
Medium 6.5
A vulnerability exists in a system interface that may, under certain conditions, fail to properly enforce authorization…
-
High 7.2
A vulnerability exists in a system component that may, under certain conditions, allow an authorized user to make unaut…
-
High 7.5
A vulnerability exists in a network-facing component that may, under certain conditions, result in service disruption. …
-
High 7.5
A vulnerability exists in a system component that may, under certain conditions, disrupt the availability of affected s…
-
High 7.5
A vulnerability exists in a monitoring component that may, under certain conditions, allow security controls to be circ…
-
High 7.5
A security vulnerability exists in AthonetOS that may allow an unauthorized party to affect service operation or gain a…
-
High 8.1
A vulnerability exists in the authentication and session-management mechanisms that may result in access not being full…
-
High 7.5
A flaw in MongoDB’s X.509 cluster-membership authentication guard could allow a holder of a cluster-member certificate …
-
Medium 6.1
Winter: CSRF through AJAX handler names reachable as backend page actions
Winter CMS is a content management system built on the Laravel PHP framework. From 1.0.319 until 1.2.14, Backend\Classes\Controller::actionExists() accepts public handler-shaped methods as page actions, so a top-level GET request can invoke state-changing bac…
-
High 7.0
A flaw in MongoDB Server's user management commands may lead to incomplete cleanup of role authorization data when role…
-
Low 2.3
In MongoDB Server, an authenticated user with insert privileges on a collection could craft a command with specially co…
-
High 8.2
A flaw exists in the server-side SSPI Kerberos authentication handler on Windows Enterprise builds of MongoDB. When pro…
-
Medium 6.8
Incorrect default file permissions in Kiro CLI (formerly Amazon Q Developer CLI) before version 2.27.0 on macOS and Lin…
-
Medium 4.5
Winter: Stored XSS through cached Brand Settings and Editor Settings custom styles
Winter CMS is a content management system built on the Laravel PHP framework. Prior to 1.2.14, BrandSetting::renderCss() and EditorSetting::renderCss() store raw LESS compiler output with Cache::forever() but apply strip_tags() only to the value returned on a…
-
High 7.1
A use-after-free issue exists in MongoDB’s SBE (Slot-Based Execution) implementation of a window function accumulator u…
-
High 8.3
Winter CMS: ImportExportController AJAX handlers bypass granular import/export permission gate
Winter CMS is a content management system built on the Laravel PHP framework. Prior to 1.2.14, the ImportExportController behavior applies userHasAccess() only to the import() and export() page actions, while Backend\Classes\Controller::execAjaxHandlers() dis…
-
High 7.0
Docker Engine overlay-network encryption rules are not restored after a firewalld reload
Moby's overlay network driver does not restore the iptables rules for encrypted overlay networks after firewalld deletes them. Unlike other Docker Engine networking components, the overlay driver does not handle firewalld reload or start signals over D-Bus. T…
-
High 7.7
Cluster-API proxy overwrites forwarded client identity with its own
SwarmKit's Cluster-API proxy can overwrite a forwarded client's TLS identity with an intermediary manager's identity. WithMetadataForwardTLSInfo replaces outgoing metadata with a copy of the incoming metadata, discarding the redirect guard's changes when buil…
-
Medium 6.5
Worklenz < 3.3.0 SQL Injection via Reporting Members Endpoint
Worklenz before 3.3.0 contains an SQL injection vulnerability in the reporting members endpoints that allows authenticated attackers to read arbitrary database contents by injecting SQL through the projects and status parameters. Attackers can send crafted va…
-
High 7.5
Everest Forms <= 3.6.3 - Unauthenticated Arbitrary File Read via 'Signature' Field Meta Key Branch of attach_entry_files
The Everest Forms plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 3.6.3 via the attach_entry_files() function. This is due to the function attaching any entry field value whose meta key matches /signature_/ to t…
-
High 7.7
Invalid Memory Access via the MSI-X table in QVM could allow an attacker in the guest to execute arbitrary code in the …
-
Medium 4.4
Out-Of-Bounds Read in the MSI-X table in the QVM could allow an attacker in the guest to cause an information disclosur…
-
Unscored —
In acquireMemory of bt_bqr_offload.cc, there is a possible way to trigger an out of bounds write via a buffer size unde…
-
Medium 6.7
In multiple locations, there is a possible way to modify coprocessor instruction and data memory from non-secure softwa…
-
Unscored —
In multiple locations, there is a possible way to trigger an out of bounds write in the shared memory tracking bitmap d…
-
Unscored —
In slice_header of hevc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This could lead…
-
Unscored —
In knee_function_info of hevc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This coul…