All CVEs — page 916 of 938
The complete archive, 25 per page, newest first. 23442 records. Search instead.
The flaw allows a user with permission to edit Airflow connections to execute arbitrary code in the scheduler process, which is outside the typical scope of their privileges.
The Authentik OAuth path in Apache Airflow FAB provider does not validate the issuer or audience claims of the id_token, allowing attackers to authenticate as a different user using a valid token from another application.
The flaw allows unauthenticated access to the token endpoint of Apache Airflow Keycloak provider, enabling attackers to obtain session tokens for any registered client in the Keycloak realm, posing a significant security risk.
The flaw allows an attacker to pair a valid Airflow session token with another user's Keycloak access or refresh token, granting unauthorized access and privileges.
An unauthenticated attacker can exploit a flaw in Arista EOS P4Runtime to achieve arbitrary code execution, granting full administrative control over the switch.
This flaw allows an attacker to cause adjacency flapping and packet loss in OSPFv2-configured networks, disrupting routing within the OSPF domain.