All CVEs — page 1040 of 1063
The complete archive, 25 per page, newest first. 26556 records. Search instead.
The vulnerability allows for a use-after-free condition in the Nouveau DRM driver, which can lead to a use-after-free error if another job owns the same region.
This vulnerability allows an attacker to disable preemption in the bpf_get_stackid function, potentially leading to a high-impact exploit.
The flaw allows incorrect slot reset on s390 systems, potentially leading to memory leaks and misbehavior of PCI functions.
The flaw allows an unauthenticated actor to trigger sensitive HA peer functions, potentially leading to elevated command execution on Edge units with HA enabled.
This vulnerability allows a userspace daemon to mmap a read-only ublk command buffer and then upgrade it to writable, enabling corruption of kernel-written fields. This can lead to privilege escalation or data corruption.
The flaw allows a user with permission to edit Airflow connections to execute arbitrary code in the scheduler process, which is outside the typical scope of their privileges.
The Authentik OAuth path in Apache Airflow FAB provider does not validate the issuer or audience claims of the id_token, allowing attackers to authenticate as a different user using a valid token from another application.
The flaw allows unauthenticated access to the token endpoint of Apache Airflow Keycloak provider, enabling attackers to obtain session tokens for any registered client in the Keycloak realm, posing a significant security risk.