CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5 matches found

Rapid7 Vulnerability Database (full)•added 2025/03/20 12:00 a.m.•4 views

CVE-2024-8999: Missing Authorization

lunary-ai/lunary version v1.4.25 contains an improper access control vulnerability in the POST /api/v1/data-warehouse/bigquery endpoint. This vulnerability allows any user to export the entire database data by creating a stream to Google BigQuery without proper authentication or authorization. Th...

9.8CVSS8.2AI score0.00794EPSS

SaveExploits1References1

Debian CVE•added 2019/06/18 3:13 p.m.•52 views

CVE-2018-18836

An issue was discovered in Netdata 1.10.0. JSON injection exists via the api/v1/data tqx parameter because of webclientapirequestv1data in web/api/webapiv1.c...

6.5CVSS7.1AI score0.01962EPSS

SaveExploits1

Debian CVE•added 2019/06/18 3:11 p.m.•56 views

CVE-2018-18837

An issue was discovered in Netdata 1.10.0. HTTP Header Injection exists via the api/v1/data filename parameter because of webclientapirequestv1data in web/api/webapiv1.c...

6.1CVSS6.9AI score0.01751EPSS

SaveExploits1

Rapid7 Vulnerability Database (full)•added 2019/06/18 12:00 a.m.•3 views

CVE-2018-18836: Improper Control of Generation of Code

An issue was discovered in Netdata 1.10.0. JSON injection exists via the api/v1/data tqx parameter because of webclientapirequestv1data in web/api/webapiv1.c...

6.5CVSS7.2AI score0.01962EPSS

SaveExploits1References2

Rapid7 Vulnerability Database (full)•added 2019/06/18 12:00 a.m.•4 views

CVE-2018-18837: Improper Neutralization of CRLF Sequences in HTTP Headers

An issue was discovered in Netdata 1.10.0. HTTP Header Injection exists via the api/v1/data filename parameter because of webclientapirequestv1data in web/api/webapiv1.c...

6.1CVSS7.2AI score0.01751EPSS

SaveExploits1References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by