All CVEs — page 890 of 912
The complete archive, 25 per page, newest first. 22791 records. Search instead.
The Authentik OAuth path in Apache Airflow FAB provider does not validate the issuer or audience claims of the id_token, allowing attackers to authenticate as a different user using a valid token from another application.
The flaw allows unauthenticated access to the token endpoint of Apache Airflow Keycloak provider, enabling attackers to obtain session tokens for any registered client in the Keycloak realm, posing a significant security risk.
The flaw allows an attacker to pair a valid Airflow session token with another user's Keycloak access or refresh token, granting unauthorized access and privileges.
An unauthenticated attacker can exploit a flaw in Arista EOS P4Runtime to achieve arbitrary code execution, granting full administrative control over the switch.
This flaw allows an attacker to cause adjacency flapping and packet loss in OSPFv2-configured networks, disrupting routing within the OSPF domain.