All CVEs — page 609 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
The flaw allows incorrect slot reset on s390 systems, potentially leading to memory leaks and misbehavior of PCI functions.
The flaw allows an unauthenticated actor to trigger sensitive HA peer functions, potentially leading to elevated command execution on Edge units with HA enabled.
This vulnerability allows a userspace daemon to mmap a read-only ublk command buffer and then upgrade it to writable, enabling corruption of kernel-written fields. This can lead to privilege escalation or data corruption.
The flaw allows a user with permission to edit Airflow connections to execute arbitrary code in the scheduler process, which is outside the typical scope of their privileges.
The Authentik OAuth path in Apache Airflow FAB provider does not validate the issuer or audience claims of the id_token, allowing attackers to authenticate as a different user using a valid token from another application.
The flaw allows unauthenticated access to the token endpoint of Apache Airflow Keycloak provider, enabling attackers to obtain session tokens for any registered client in the Keycloak realm, posing a significant security risk.
The flaw allows an attacker to pair a valid Airflow session token with another user's Keycloak access or refresh token, granting unauthorized access and privileges.
An unauthenticated attacker can exploit a flaw in Arista EOS P4Runtime to achieve arbitrary code execution, granting full administrative control over the switch.