PT-2023-18601 · Suse · Kubewarden-Controller

Name of the Vulnerable Software and Affected Versions: SUSE kubewarden kubewarden-controller versions prior to 1.6.0 Description: An Improper Privilege Management issue allows attackers to read arbitrary secrets if they gain access to the ServiceAccount kubewarden-controller. Recommendations: For...

SUSE kubewarden kubewarden-controller 安全漏洞

SUSE kubewarden is an open source policy engine from SUSE. It integrates with Kubernetes using the widely adopted Webhook Admission Control mechanism. A security vulnerability in SUSE kubewarden kubewarden-controller prior to version 1.6.0, which stems from improper privilege management in SUSE...

PT-2023-3760 · Suse · Suse Rancher

Name of the Vulnerable Software and Affected Versions: SUSE Rancher versions 2.6.0 through 2.6.12 SUSE Rancher versions 2.7.0 through 2.7.3 Description: The issue is related to improper privilege management in SUSE Rancher, allowing standard users to manipulate Kubernetes secrets in the local...

OpenFeature Operator 安全漏洞

OpenFeature Operator is OpenFeature's tool for exposing feature flags to applications. A security vulnerability exists in OpenFeature Operator versions prior to 0.2.32, which stems from a loose privilege configured on open-feature-operator-controller-manager that can be used to escalate the...

VulnCheck KEV: CVE-2023-29492

Novi Survey contains an insecure deserialization vulnerability that allows remote attackers to execute code on the server in the context of the service account...

Novi Survey Insecure Deserialization Vulnerability

Novi Survey contains an insecure deserialization vulnerability that allows remote attackers to execute code on the server in the context of the service account...

OpenFeature Operator vulnerable to Cluster-level Privilege Escalation

Impact On a node controlled by an attacker or malicious user, the lax permissions configured on open-feature-operator-controller-manager can be used to further escalate the privileges of any service account in the cluster. The increased privileges could be used to modify cluster state, leading to...

PT-2023-22090 · Unknown · Openfeature Operator

Name of the Vulnerable Software and Affected Versions: OpenFeature Operator versions prior to 0.2.32 Description: The issue allows an attacker to escalate the privileges of any service account in the cluster, assuming the pre-existence of a vulnerability that enables arbitrary code execution. Thi...

CVE-2023-29492

Novi Survey before 8.9.43676 allows remote attackers to execute arbitrary code on the server in the context of the service account. This does not provide access to stored survey or response data...

CVE-2023-29492

Novi Survey before 8.9.43676 allows remote attackers to execute arbitrary code on the server in the context of the service account. This does not provide access to stored survey or response data...

Code injection

Novi Survey before 8.9.43676 allows remote attackers to execute arbitrary code on the server in the context of the service account. This does not provide access to stored survey or response data...

Novi Survey 代码注入漏洞

Novi Survey is an advanced survey software for online surveys, web surveys and email surveys from Novi Survey. A security vulnerability exists in versions prior to Novi Survey 8.9.43676, which can be exploited by attackers to execute arbitrary code on the server in the context of a service accoun...

CVE-2023-29492

Novi Survey before 8.9.43676 allows remote attackers to execute arbitrary code on the server in the context of the service account. This does not provide access to stored survey or response data. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

CVE-2018-25084

A vulnerability, which was classified as problematic, has been found in Ping Identity Self-Service Account Manager 1.1.2. Affected by this issue is some unknown functionality of the file src/main/java/com/unboundid/webapp/ssam/SSAMController.java. The manipulation leads to cross site scripting. T...

CVE-2018-25084

A vulnerability, which was classified as problematic, has been found in Ping Identity Self-Service Account Manager 1.1.2. Affected by this issue is some unknown functionality of the file src/main/java/com/unboundid/webapp/ssam/SSAMController.java. The manipulation leads to cross site scripting. T...

Cross site scripting

A vulnerability, which was classified as problematic, has been found in Ping Identity Self-Service Account Manager 1.1.2. Affected by this issue is some unknown functionality of the file src/main/java/com/unboundid/webapp/ssam/SSAMController.java. The manipulation leads to cross site scripting. T...

CVE-2018-25084 Ping Identity Self-Service Account Manager SSAMController.java cross site scripting

A vulnerability, which was classified as problematic, has been found in Ping Identity Self-Service Account Manager 1.1.2. Affected by this issue is some unknown functionality of the file src/main/java/com/unboundid/webapp/ssam/SSAMController.java. The manipulation leads to cross site scripting. T...

CVE-2018-25084

CVE-2018-25084 affects Ping Identity Self-Service Account Manager (SSAM) 1.1.2. The issue is a cross-site scripting vulnerability in an unknown SSAMController.java function, exploitable remotely. A fix is available in SSAM 1.1.3, with patch reference f64b10d63bb19ca2228b0c2d561a1a6e5a3bf251. Publ...

Ping Identity Self-Service Account Manager 跨站脚本漏洞

Ping Identity Self-Service Account Manager Ping Identity SSAM is a Java web application from Ping Identity, Inc. It enables users to perform their own account registration, profile updates, and password changes. A cross-site scripting vulnerability exists in Ping Identity Self-Service Account...

PT-2023-2447

Name of the Vulnerable Software and Affected Versions Novi Survey versions prior to 8.9.43676 Description The issue is related to insecure deserialization, allowing remote attackers to execute arbitrary code on the server in the context of the service account. This does not provide access to stor...