CVE Vulnerability Catalog

Nuclio, a serverless framework, prior to version 1.17.4 has an incomplete fix for unauthenticated OS command injection in the dashboard on the local/Docker platform. The list-all resource path interpolates the resourceNamespace parameter unquoted into a /bin/sh -c command string, allowing an unauthenticated attacker to inject shell metacharacters via HTTP headers and execute arbitrary commands inside the dashboard container.

Nuclio, a serverless framework, prior to version 1.17.4 has an OS command injection vulnerability in the local Docker platform. The function namespace is interpolated unvalidated into a double-quoted docker ps --filter command executed via /bin/sh -c. Because the default auth kind is nop (unauthenticated), a remote attacker can inject arbitrary OS commands that run as root inside the dashboard container, which holds the Docker socket, leading to host compromise.

Nuclio, a serverless framework, from version 1.6.19 to before 1.17.2 has a vulnerability in the Dashboard build pipeline that does not sanitize the spec.build.tempDir field before using it to construct a shell command. When the Kaniko container builder is enabled, a user with function-create permission can inject shell metacharacters and achieve arbitrary command execution inside the Dashboard container, which runs with a Kubernetes service account holding wildcard access to Secrets, Pods, Jobs, and Deployments.

Open edX Platform enables the authoring and delivery of online learning at any scale. Prior to commit 00b7c3c, the endpoint accepts user-supplied files[].url, performs a server-side fetch using "requests.get(url, allow_redirects=True)". The fetched bytes are then returned inside a ZIP response. This enables SSRF with response exfiltration. Redirect-following is enabled, and there is no timeout in the vulnerable fetch path. This issue has been patched via commit 00b7c3c.

Open edX Platform enables the authoring and delivery of online learning at any scale. Prior to commit 3a5ac85, a security vulnerability has been identified in the Open edX LMS platform's LTI (Learning Tools Interoperability) Provider implementation. The validate_timestamp_and_nonce function in lms/djangoapps/lti_provider/signature_validator.py does not validate OAuth nonces or timestamps, allowing an attacker who captures a valid LTI launch request to replay it an unlimited number of times without detection. This issue has been patched via commit 3a5ac85.

Open edX Platform prior to commit 59bb6d6 has a vulnerability in the set_course_mode_price() function, which is protected only by @login_required and performs no course-level permission check. Any authenticated user, including a learner account with zero course roles, can issue a single POST request to overwrite the honor mode price and currency of any course on the platform.

Nuclio, a serverless framework, prior to version 1.16.5 has a vulnerability in the Java runtime that generates a build.gradle file during function builds using Go's text/template package. The template renders runtimeAttributes.repositories[] values with the {{ . }} action, which performs no escaping. An attacker can embed a closing brace to break out of the repositories block and append arbitrary Groovy statements that execute unconditionally during the Gradle configuration phase.

Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.16.5, Nuclio Dashboard exposes POST /api/functions without authentication by default (NOP auth mode). The spec.handler field (e.g., mymodule:myfunction) is parsed by functionconfig.ParseHandler() which splits on : only — no path validation is applied to the module portion. This issue has been patched in version 1.16.5.

Nuclio before version 1.16.4 contains a command injection vulnerability in the construction of the curl invocation for cron triggers. The event.headers keys and event.body are not properly sanitized, allowing injection of dangerous arguments into the command executed in the CronJob container.

Nuclio before version 1.16.0 contains a vulnerability in the project management API of Nuclio Dashboard. Any authenticated user, even without membership in the target project, can bypass OPA authorization checks on write paths (PUT /api/projects/{id}, DELETE /api/projects) and modify or delete any project along with all its associated resources.

Multiple vulnerabilities in the Secure/Multipurpose Internet Mail Extensions (S/MIME) decryption functionality of Cisco Secure Email could allow an unauthenticated, remote attacker to recover plain text from encrypted email messages. These vulnerabilities are due to insufficient validation of message integrity. An attacker could exploit these vulnerabilities by using a machine-in-the-middle technique to intercept and modify traffic between email gateways. A successful exploit could allow the attacker to obtain plaintext content from the encrypted communication.

Multiple vulnerabilities in the Secure/Multipurpose Internet Mail Extensions (S/MIME) decryption functionality of Cisco Secure Email could allow an unauthenticated, remote attacker to recover plain text from encrypted email messages. These vulnerabilities are due to insufficient validation of message integrity. An attacker could exploit these vulnerabilities by using a machine-in-the-middle technique to intercept and modify traffic between email gateways. A successful exploit could allow the attacker to obtain plaintext content from the encrypted communication.

A vulnerability in Cisco Desk Phone 9800 Series, IP Phone 7800 and 8800 Series, and Video Phone 8875 running SIP Software allows an unauthenticated, remote attacker to cause a DoS condition. It is due to improper memory management when processing HTTP packets, and exploitation involves sending a continuous stream of crafted HTTP packets.

A vulnerability in Cisco IOS XR Software was discovered during an internal security review. It relates to improper checking or handling of exceptional conditions, classified as CWE-703.

A vulnerability in Cisco IOS XR Software relates to improper access control issues (CWE-284). It was discovered during an internal security review and addressed in software hardening releases.

A vulnerability in Cisco IOS XR Software was discovered during an internal security review. It relates to improper neutralization issues, classified as CWE-707.

A vulnerability in Cisco IOS XR Software was discovered during an internal security review. It relates to protection mechanism failure issues, classified as CWE-693.

A vulnerability in Cisco IOS XR Software was discovered during an internal security review. It relates to insufficient control flow management issues, classified as CWE-691.

A vulnerability in Cisco IOS XR Software was discovered during an internal security review. It relates to incorrect calculation issues, classified as CWE-682.

A vulnerability in Cisco IOS XR Software relates to improper resource control issues (CWE-664). It was discovered during an internal security review and addressed in software hardening releases.