381 matches found
CVE-2025-62503 Apache Airflow: Privilege boundary bypass in bulk APIs (create action can upsert existing Pools/Connections/Variables)
User with CREATE and no UPDATE privilege for Pools, Connections, Variables could update existing records via bulk create API with overwrite action...
CVE-2025-62503 Apache Airflow: Privilege boundary bypass in bulk APIs (create action can upsert existing Pools/Connections/Variables)
User with CREATE and no UPDATE privilege for Pools, Connections, Variables could update existing records via bulk create API with overwrite action...
CVE-2025-62503
Apache Airflow is susceptible to a privilege boundary bypass due to insufficient authorization checks in its bulk create API . An attacker with only CREATE privileges, but lacking UPDATE permissions, can exploit the overwrite action to modify existing Pools , Connections , and Variables . This im...
CVE-2025-62503 Apache Airflow: Privilege boundary bypass in bulk APIs (create action can upsert existing Pools/Connections/Variables)
User with CREATE and no UPDATE privilege for Pools, Connections, Variables could update existing records via bulk create API with overwrite action...
PT-2025-44369
Name of the Vulnerable Software and Affected Versions Versions prior to 2025-62503 Description A user possessing CREATE privilege but lacking UPDATE privilege for Pools, Connections, and Variables can modify existing records through the bulk create API utilizing the overwrite action. This allows...
EUVD-2005-1744
Malware in sbrugna...
EUVD-2021-17229
Malware in sbrugna...
EUVD-2018-2928
Malware in sbrugna...
EUVD-2010-2087
Malware in sbrugna...
EUVD-2020-3134
Malware in sbrugna...
EUVD-2024-51312
Malicious code in bioql PyPI...
EUVD-2022-49555
Malicious code in bioql PyPI...
EUVD-2023-43800
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2025-38504
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: iouring/zcrx: fix pp destruction warnings With multiple page pools and in some other cases w...
Linux Distros Unpatched Vulnerability : CVE-2017-12155
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A resource-permission flaw was found in the openstack-tripleo-heat-templates package where ceph.client.openstack.keyring is created as world-readable. A local...
SUSE CVE-2025-38504
In the Linux kernel, the following vulnerability has been resolved: iouring/zcrx: fix pp destruction warnings With multiple page pools and in some other cases we can have allocated niovs on page pool destruction. Remove a misplaced warning checking that all niovs are returned to zcrx on...
CVE-2025-38504
In the Linux kernel, the following vulnerability has been resolved: iouring/zcrx: fix pp destruction warnings With multiple page pools and in some other cases we can have allocated niovs on page pool destruction. Remove a misplaced warning checking that all niovs are returned to zcrx on...
CVE-2025-38504 io_uring/zcrx: fix pp destruction warnings
In the Linux kernel, the following vulnerability has been resolved: iouring/zcrx: fix pp destruction warnings With multiple page pools and in some other cases we can have allocated niovs on page pool destruction. Remove a misplaced warning checking that all niovs are returned to zcrx on...
CVE-2025-38504 io_uring/zcrx: fix pp destruction warnings
In the Linux kernel, the following vulnerability has been resolved: iouring/zcrx: fix pp destruction warnings With multiple page pools and in some other cases we can have allocated niovs on page pool destruction. Remove a misplaced warning checking that all niovs are returned to zcrx on...
