Lucene search
+L

24 matches found

EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2021-20385

Malware in sbrugna...

8.8CVSS7.4AI score0.00853EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•20 views

EUVD-2021-24652

Malware in sbrugna...

8.8CVSS7.8AI score0.01101EPSS
SaveExploits0References3
CNVD
CNVD
•added 2021/12/19 12:00 a.m.•52 views

Kyma Elevation of Privilege Vulnerability

kyma is an open source platform for scaling applications using microservices and serverless functionality. kyma suffers from an elevation-of-privilege vulnerability that stems from a networked system or product that does not properly authenticate incoming data. An authenticated attacker could...

8.8CVSS3.2AI score0.01101EPSS
SaveExploits0References1
Veracode
Veracode
•added 2021/12/15 11:06 a.m.•29 views

Privilege Escalation

kyma-project/kyma is vulnerable to privilege escalation. The vulnerability exists because it does not properly handle permissions, which allows authenticated users to escalate their permissions...

8.8CVSS4.6AI score0.01101EPSS
SaveExploits0References3Affected Software1
attackerkb
attackerkb
•added 2021/12/14 4:15 p.m.•13 views

CVE-2021-38182

Due to insufficient input validation of Kyma, authenticated users can pass a Header of their choice and escalate privileges which can completely compromise the cluster...

8.8CVSS7.2AI score0.01101EPSS
SaveExploits0References3Affected Software1
osv_cve
osv_cve
•added 2021/12/14 4:15 p.m.•23 views

CVE-2021-38182

Due to insufficient input validation of Kyma, authenticated users can pass a Header of their choice and escalate privileges which can completely compromise the cluster...

8.8CVSS6.9AI score
SaveExploits0References2
NVD
NVD
•added 2021/12/14 4:15 p.m.•29 views

CVE-2021-38182

Due to insufficient input validation of Kyma, authenticated users can pass a Header of their choice and escalate privileges which can completely compromise the cluster...

8.8CVSS0.01101EPSS
SaveExploits0References2
Prion
Prion
•added 2021/12/14 4:15 p.m.•29 views

Input validation

Due to insufficient input validation of Kyma, authenticated users can pass a Header of their choice and escalate privileges which can completely compromise the cluster...

6.5CVSS8.6AI score0.01101EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2021/12/14 3:44 p.m.•69 views

CVE-2021-38182

CVE-2021-38182 affects Kyma. The vulnerability stems from insufficient input validation, allowing authenticated users to craft a custom Header and escalate privileges, potentially compromising the entire cluster. The issue is documented across multiple sources (Red Hat, CNVD, NVD, OSV, etc.) with...

8.8CVSS8.6AI score0.01101EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2021/12/14 3:44 p.m.•38 views

CVE-2021-38182

Due to insufficient input validation of Kyma, authenticated users can pass a Header of their choice and escalate privileges which can completely compromise the cluster...

8.9AI score0.01101EPSS
SaveExploits0References2
Mend
Mend
•added 2021/12/14 3:44 p.m.•4 views

CVE-2021-38182

Due to insufficient input validation of Kyma, authenticated users can pass a Header of their choice and escalate privileges which can completely compromise the cluster...

8.8CVSS0.01101EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/14 12:00 a.m.•7 views

CVE-2021-38182: Improper Input Validation

Due to insufficient input validation of Kyma, authenticated users can pass a Header of their choice and escalate privileges which can completely compromise the cluster...

8.8CVSS5.8AI score0.01101EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2021/12/14 12:00 a.m.•6 views

PT-2021-21991

Name of the Vulnerable Software and Affected Versions: Kyma affected versions not specified Description: The issue arises from insufficient input validation in Kyma, allowing authenticated users to pass a header of their choice and escalate privileges, potentially compromising the cluster entirel...

8.8CVSS0.01101EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2021/12/14 12:00 a.m.•21 views

kyma 输入验证错误漏洞

kyma is an open source platform for scaling applications using microservices and serverless functionality. kyma suffers from an elevation-of-privilege vulnerability that stems from a networked system or product that does not properly authenticate incoming data. An authenticated attacker could...

8.8CVSS5.7AI score0.01101EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2021/08/10 8:15 p.m.•15 views

CVE-2021-33708

Due to insufficient input validation in Kyma, authenticated users can pass a Header of their choice and escalate privileges...

8.8CVSS6.9AI score
SaveExploits0References1
NVD
NVD
•added 2021/08/10 8:15 p.m.•27 views

CVE-2021-33708

Due to insufficient input validation in Kyma, authenticated users can pass a Header of their choice and escalate privileges...

8.8CVSS0.00853EPSS
SaveExploits0References1
Prion
Prion
•added 2021/08/10 8:15 p.m.•20 views

Input validation

Due to insufficient input validation in Kyma, authenticated users can pass a Header of their choice and escalate privileges...

6.5CVSS8.6AI score0.00853EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
•added 2021/08/10 8:15 p.m.•9 views

CVE-2021-33708

Due to insufficient input validation in Kyma, authenticated users can pass a Header of their choice and escalate privileges...

8.8CVSS7.1AI score0.00853EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2021/08/10 7:25 p.m.•62 views

CVE-2021-33708

CVE-2021-33708 refers to Kyma, where insufficient input validation allows authenticated users to craft a custom Header to escalate privileges. The connected Red Hat, NVD, OSV, and other feeds corroborate the core issue: an input validation flaw enabling privilege escalation via authenticated requ...

8.8CVSS8.6AI score0.00853EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2021/08/10 7:25 p.m.•31 views

CVE-2021-33708

Due to insufficient input validation in Kyma, authenticated users can pass a Header of their choice and escalate privileges...

7.6CVSS8.9AI score0.00853EPSS
SaveExploits0References1
Rows per page
Query Builder