CVE Vulnerability Catalog

Metrics::Any::Adapter::Statsd versions before 0.04 for Perl do not protect against metric injections. The send method does not validate the contents of metric names or values, allowing injections if names contain newlines or statsd control characters.

There is an OS command injection vulnerability in the VPN module of TP-Link Archer AX12 v1, AX17 v1, AX18 v1, and AX1300 v1.6 routers. An adjacent, authenticated attacker can execute arbitrary commands on the device by importing a specially crafted VPN client configuration file.

Fission is a serverless framework, native to Kubernetes, which prior to version 1.25.0 had a vulnerability in PodSpec safety validation for Environment and Function CRDs. This vulnerability allowed the addition of the unauthorized capability CAP_SYS_TIME, enabling the execution of attacker-controlled code.

Fission is a Kubernetes-native serverless framework that prior to version 1.25.0 had a vulnerability in the Unarchive function, allowing attackers to write files to unauthorized locations. By manipulating archive names, an attacker could save files in other users' directories or in secret/config volumes.

Fission is a serverless framework, native to Kubernetes, which prior to version 1.24.0 did not properly validate the namespace for spec.environment.namespace in the function admission webhook. This issue has been patched in version 1.24.0.

Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications. In versions prior to 1.24.0, the Fission Function spec did not validate the namespace for Package reference, which could lead to unauthorized access.

Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications. Prior to version 1.24.0, a low-privilege developer could create a KubernetesWatchTrigger (KWT) in their own namespace, allowing for a persistent surveillance channel over any other namespace.

Fission is a serverless framework, native to Kubernetes, that simplifies the deployment of functions and applications. Prior to version 1.24.0, Fission's buildermgr controller processed Package CRDs without verifying that the namespace in Package.spec.environment matched the namespace in Package.metadata.

Fission, a serverless framework for Kubernetes, prior to version 1.23.0, created runtime pods with ServiceAccountName: fission-fetcher, which had permissions to read secrets and configmaps across the entire namespace. This allowed user-supplied function code to access the Kubernetes API token, enabling it to read any secrets or configmaps in the function's namespace.

Fission is a serverless framework, Kubernetes-native, that prior to version 1.23.0 did not require authentication or authorization for CRUD operations on archives in the storagesvc component. This allowed unauthorized users to access archives belonging to other users.

FrankenPHP is a modern application server for PHP, which in versions from 1.11.2 to before 1.12.3 has an issue in the splitPos() function in cgi.go. This flaw allows an attacker to mislead the server into treating a non-PHP file as a PHP script, potentially leading to remote code execution.

In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, and Splunk Cloud Platform versions below 10.3.2512.11, 10.2.2510.15, 10.1.2507.23, and 9.3.2411.132, a low-privileged user can store a malicious script in a classic dashboard HTML panel, leading to unauthorized JavaScript code execution in another user's browser.

In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, and Splunk Cloud Platform versions below 10.4.2604.3, 10.3.2512.12, 10.2.2510.14, 10.1.2507.22, and 9.3.2411.132, a low-privileged user can send server-side requests to arbitrary internal destinations through the Dashboard Studio PDF export feature. The vulnerability exists due to improper trusted-domain validation and automatic following of HTTP redirects without re-validating each redirect target.

In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, as well as Splunk Cloud Platform versions below 10.3.2512.12, 10.2.2510.14, 10.1.2507.22, and 9.3.2411.132, a low-privileged user without 'admin' or 'power' roles can perform Remote Code Execution (RCE) through the Splunk Secure Gateway app. This issue arises from unsafe deserialization of App Key Value Store (KV Store) data using the 'jsonpickle' library.

In aws-cdk-lib before version 2.245.0 (2.246.0 on Windows), there is an OS command injection vulnerability in the NodejsFunction local bundling pipeline. An attacker controlling the value of one or more bundling properties can execute arbitrary commands on the host running the CDK toolchain.

An Argument Injection vulnerability was found in NoMachine before versions 9.5.7 and 8.23.2. The flaw is due to improper neutralization of argument delimiters in a command, allowing an attacker to inject malicious arguments.

Stack-based buffer overflow in the inet_drv driver of Erlang OTP. An unauthenticated remote attacker can send a crafted SCTP ERROR chunk, crashing the BEAM VM.

Plane is an open-source project management tool. Prior to version 1.3.1, there was a cross-workspace asset authorization bypass that allowed any authenticated user to read, copy, delete, and overwrite assets in other Plane workspaces.

Roxy-WI is a web interface for managing Haproxy, Nginx, Apache, and Keepalived servers. In versions 8.2.6.4 and prior, there is a vulnerability that allows bypassing security checks related to path validation, potentially leading to path traversal attacks.

Roxy-WI, a web interface for managing Haproxy, Nginx, Apache, and Keepalived servers, has an authentication bypass vulnerability in versions 8.2.6.4 and prior. This vulnerability allows bypassing authentication via the 'api' substring in the URL and accessing the unauthenticated /api/gpt.