CVE Vulnerability Catalog

A denial-of-service vulnerability in kafka-python before version 2.3.2 allows a malicious broker or man-in-the-middle attacker to exhaust memory or hang connections. The attack sends a crafted 4-byte frame length value without bounds validation.

A command injection vulnerability in Palo Alto Networks PAN-OS software allows an authenticated administrator to bypass system restrictions and run arbitrary commands as root. The user must have access to the PAN-OS CLI or Web UI to exploit this issue.

A privilege escalation vulnerability in Palo Alto Networks PAN-OS software allows an authenticated administrator with CLI access to perform actions with root privileges. The risk is minimized when CLI access is restricted to trusted administrators and the management interface is protected.

A privilege escalation vulnerability in the Palo Alto Networks Prisma Access Agent on Linux devices allows a local user to execute code with elevated privileges.

Palo Alto Networks Cortex XSOAR engine software running on Linux has a path traversal vulnerability. An unauthenticated attacker on an adjacent network, capable of intercepting and manipulating network traffic (MITM attack), can write arbitrary files to the host.

A malicious application may cause unexpected changes in memory shared between processes. A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.4.

A flaw in dracut allows a remote attacker on the adjacent network to inject commands via specially crafted DHCP options (e.g., a malicious hostname). These options are improperly handled and written into temporary shell scripts without proper escaping, leading to command injection. The attacker can achieve root code execution within the initramfs, potentially compromising the system's boot and network behavior.

The Snappy library in versions prior to 1.7.1 has an issue with improper processing of binary paths, which can lead to code injection. The escapeshellarg function does not work correctly, allowing for the use of unsafe input.

Atril Document Viewer, the default document reader in the MATE desktop environment, contains a single-click remote code execution vulnerability. An attacker can trick a user into clicking a link in a malicious PDF, leading to arbitrary code execution. The issue stems from insufficient argument quoting in the ev_spawn function.

Race condition vulnerability in V8 in Google Chrome prior to version 144.0.7559.99 allows a remote attacker to exploit type confusion via a crafted HTML page.

Metrics::Any::Adapter::Statsd versions before 0.04 for Perl do not protect against metric injections. The send method does not validate the contents of metric names or values, allowing injections if names contain newlines or statsd control characters.

There is an OS command injection vulnerability in the VPN module of TP-Link Archer AX12 v1, AX17 v1, AX18 v1, and AX1300 v1.6 routers. An adjacent, authenticated attacker can execute arbitrary commands on the device by importing a specially crafted VPN client configuration file.

Fission is a serverless framework, native to Kubernetes, which prior to version 1.25.0 had a vulnerability in PodSpec safety validation for Environment and Function CRDs. This vulnerability allowed the addition of the unauthorized capability CAP_SYS_TIME, enabling the execution of attacker-controlled code.

Fission is a Kubernetes-native serverless framework that prior to version 1.25.0 had a vulnerability in the Unarchive function, allowing attackers to write files to unauthorized locations. By manipulating archive names, an attacker could save files in other users' directories or in secret/config volumes.

Fission is a serverless framework, native to Kubernetes, which prior to version 1.24.0 did not properly validate the namespace for spec.environment.namespace in the function admission webhook. This issue has been patched in version 1.24.0.

Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications. In versions prior to 1.24.0, the Fission Function spec did not validate the namespace for Package reference, which could lead to unauthorized access.

Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications. Prior to version 1.24.0, a low-privilege developer could create a KubernetesWatchTrigger (KWT) in their own namespace, allowing for a persistent surveillance channel over any other namespace.

Fission is a serverless framework, native to Kubernetes, that simplifies the deployment of functions and applications. Prior to version 1.24.0, Fission's buildermgr controller processed Package CRDs without verifying that the namespace in Package.spec.environment matched the namespace in Package.metadata.

Fission, a serverless framework for Kubernetes, prior to version 1.23.0, created runtime pods with ServiceAccountName: fission-fetcher, which had permissions to read secrets and configmaps across the entire namespace. This allowed user-supplied function code to access the Kubernetes API token, enabling it to read any secrets or configmaps in the function's namespace.

Fission is a serverless framework, Kubernetes-native, that prior to version 1.23.0 did not require authentication or authorization for CRUD operations on archives in the storagesvc component. This allowed unauthorized users to access archives belonging to other users.