CVE Vulnerability Catalog

Vulnerability in the OpenShift Cloud Credential Operator Mint-mode IAM policies for AWS. Operator credentials are provisioned with account-wide scope for destructive actions instead of being restricted to cluster-owned resources, enabling cross-scope impact after credential compromise.

A flaw in the OpenShift Pipelines operator. The 'tekton-scheduler-rolebinding' ClusterRoleBinding grants the 'system:authenticated' group write access to Kueue and cert-manager custom resources via the 'tekton-scheduler-role' ClusterRole. When Kueue or cert-manager CRDs are present, any authenticated user can disrupt workload scheduling, tamper with priorities, delete other tenants' Workload objects, or induce cert-manager to overwrite TLS Secrets including the default ingress controller certificate.

HCL iControl was affected by Export CSV - CSV Injection vulnerability. It is vulnerable to a reflected cross-site scripting vulnerability. This was caused by an insufficient sanitation of input parameters.

A local privilege escalation vulnerability exists in Forcepoint VPN Client that allows a local non-administrative user to escalate privileges to SYSTEM. This issue affects VPN Client for Windows: versions 6.11.3 and prior.

The Photo Gallery by 10Web plugin for WordPress versions up to 1.8.41 is vulnerable to blind SQL injection. Attackers can inject SQL queries through unsanitized input.

The account validation endpoint /v1/User/validate returns full user profile data, which can be crawled by iterating predictable identification strings.

The device encrypts data using AES-CBC with static zero-filled Initialization Vectors (IVs), making it susceptible to replay attacks and known-plaintext decryption.

Broadcast events allow malicious software to rewrite the device's default Mobile Device Management (MDM) endpoint address, shifting administrative ownership to an external attacker.

The system Binder accepts unverified AT commands, allowing local applications to read baseband files or disable cellular connectivity.

A vulnerability in the Supermicro BMC SMTP service on model AS-2115HS-TNR allows an attacker to gain administrator privileges and inject specially crafted characters into the SMTP configuration, potentially causing unintended command execution during process invocation.

System log files output unencrypted SMTP server authentication passwords alongside sensitive employee corporate identification data.

Crucial management API endpoints for cellular eSIM allocation do not validate caller authorization, allowing remote profiles to be rewritten or deleted.

Internal multimedia session archives are accessible without authentication, exacerbated by loose Cross-Origin Resource Sharing (CORS) rules that allow cross-site theft.

The debugging routine SCREEN_CLICK(5053) allows bypassing the standard login screen and directly entering an interactive shell interface.

Overly permissive configuration settings on cloud storage containers expose active telemetry information publicly to the internet.

The system fails to evaluate instructional permissions over multiple internal operation codes (opcodes), permitting unauthorized application installations or command executions.

Unchecked public access permissions on a core Broadcast Receiver allow unauthorized local software components to invoke administrative operations.

The hard-coded APK resource files never expire, and the shared scepter leads to information leaks and potential misuse.

In BOSH Director (all versions prior to v282.1.12), the ReleaseJob#unpack function builds job_dir and job_tgz paths using a name from the attacker-supplied release.MF file. These paths are interpolated into a shell command without proper escaping, allowing shell command injection via metacharacters in the name. An attacker can execute arbitrary commands in the context of BOSH Director.

HTML::Entities versions before 3.84 for Perl read freed heap memory in _decode_entities. A cached pointer into the entity-value SV could read from freed allocation after reallocation, potentially disclosing adjacent heap contents.