All CVEs — page 724 of 854
The complete archive, 25 per page, newest first. 21350 records. Search instead.
The Klever-Go blockchain node has a memory exhaustion vulnerability in its WebSocket API where unauthenticated clients can create unlimited subscriptions without size limits or connection caps, potentially leading to node crashes and consensus disruption.
The flaw allows a remote client to change global log levels and formatting options, potentially suppressing normal logs and increasing verbosity, impacting operator visibility and operational information access.
The flaw in Ansible Automation Platform allows a user with workflow-admin permission to copy a WorkflowJobTemplate and launch jobs in unauthorized instance groups, including the control-plane, bypassing security boundaries.
A flaw in Ansible Automation Platform's automation-controller allows privileged users to inject malicious environment variables that can hijack process execution flows, potentially leading to arbitrary code execution within execution-environment containers. This occurs due to an incomplete validation of environment variable names that omits critical loader variables like BASH_ENV and LD_PRELOAD.
The flaw allows an administrator to read sensitive secrets like the Django secret key and database password by crafting a specific log message format, which can then be forwarded to an external log aggregator.
The flaw allows an attacker to inject JavaScript code into the HTML output, leading to potential full platform takeover.
The flaw in AWX allows an attacker to inject initContainers, serviceAccountName overrides, and projected service account token volumes, leading to privilege escalation and potential exfiltration of namespace secrets.