Lucene search
K

49 matches found

OSV
OSV
added 2024/03/06 10:55 a.m.21 views

BIT-AIRFLOW-2023-25754 Apache Airflow: Privilege escalation using airflow logs

Privilege Context Switching Error vulnerability in Apache Software Foundation Apache Airflow.This issue affects Apache Airflow: before 2.6.0...

9.8CVSS9.4AI score0.00499EPSS
Exploits0References4
OSV
OSV
added 2023/05/08 12:30 p.m.27 views

GHSA-JCHM-FM4Q-C2FP Apache Airflow vulnerable to Privilege Context Switching Error

Privilege Context Switching Error vulnerability in Apache Software Foundation Apache Airflow. This issue affects Apache Airflow: before 2.6.0...

9.8CVSS9.3AI score0.00499EPSS
Exploits0References9
NVD
NVD
added 2023/05/08 12:15 p.m.14 views

CVE-2023-25754

Privilege Context Switching Error vulnerability in Apache Software Foundation Apache Airflow.This issue affects Apache Airflow: before 2.6.0...

9.8CVSS9.5AI score0.00499EPSS
Exploits0References3
OSV
OSV
added 2023/05/08 12:15 p.m.17 views

CVE-2023-25754

Privilege Context Switching Error vulnerability in Apache Software Foundation Apache Airflow.This issue affects Apache Airflow: before 2.6.0...

9.8CVSS9.4AI score
Exploits0References3
Prion
Prion
added 2023/05/08 12:15 p.m.23 views

Design/Logic Flaw

Privilege Context Switching Error vulnerability in Apache Software Foundation Apache Airflow.This issue affects Apache Airflow: before 2.6.0...

7.5CVSS9.5AI score0.00499EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2023/05/08 12:15 p.m.13 views

PYSEC-2023-59

Privilege Context Switching Error vulnerability in Apache Software Foundation Apache Airflow.This issue affects Apache Airflow: before 2.6.0...

9.8CVSS7.2AI score0.00499EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2023/05/08 12:0 a.m.1 views

PT-2023-20278 · Apache · Apache Airflow

Name of the Vulnerable Software and Affected Versions: Apache Airflow versions prior to 2.6.0 Description: The issue is related to a Privilege Context Switching Error. This error affects the functionality of Apache Airflow, potentially allowing unauthorized access or actions due to incorrect...

9.8CVSS7.2AI score0.00499EPSS
Exploits0References14
SUSE CVE
SUSE CVE
added 2023/02/15 4:20 a.m.2 views

SUSE CVE-2018-1000400

Kubernetes CRI-O version prior to 1.9 contains a Privilege Context Switching Error CWE-270 vulnerability in the handling of ambient capabilities that can result in containers running with elevated privileges, allowing users abilities they should not have. This attack appears to be exploitable via...

8.8CVSS8.8AI score0.00879EPSS
Exploits0References3
SUSE CVE
SUSE CVE
added 2023/02/15 3:25 a.m.1 views

SUSE CVE-2022-31214

A Privilege Context Switching issue was discovered in join.c in Firejail 0.9.68. By crafting a bogus Firejail container that is accepted by the Firejail setuid-root program as a join target, a local attacker can enter an environment in which the Linux user namespace is still the initial user...

7.8CVSS7.5AI score0.0007EPSS
Exploits0References5
NVD
NVD
added 2022/10/21 6:15 p.m.11 views

CVE-2022-34438

Dell PowerScale OneFS, versions 8.2.x-9.4.0.x, contain a privilege context switching error. A local authenticated malicious user with high privileges could potentially exploit this vulnerability, leading to full system compromise. This impacts compliance mode clusters...

6.7CVSS0.00039EPSS
Exploits0References1
CVE
CVE
added 2022/10/21 6:5 p.m.59 views

CVE-2022-34438

Dell PowerScale OneFS (versions 8.2.x–9.4.0.x) is affected by a privilege context switching error. The vulnerability is a local, authenticated- user context issue that could allow a high-privilege user to achieve full system compromise, with impact on compliance mode clusters. The connected docum...

6.7CVSS6.2AI score0.00039EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2022/10/21 6:5 p.m.12 views

CVE-2022-34438

Dell PowerScale OneFS, versions 8.2.x-9.4.0.x, contain a privilege context switching error. A local authenticated malicious user with high privileges could potentially exploit this vulnerability, leading to full system compromise. This impacts compliance mode clusters...

6.7CVSS6.5AI score0.00039EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2022/06/29 12:0 a.m.23 views

Debian DLA-3061-1 : firejail - LTS security update

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-3061 advisory. Matthias Gerstner discovered that the --join option of Firejail, a sandbox to restrict an application environment, was susceptible to local privilege escalation to root. Fo...

7.8CVSS7.2AI score0.0007EPSS
Exploits0References6
Tenable Nessus
Tenable Nessus
added 2022/06/23 12:0 a.m.40 views

Debian DSA-5167-1 : firejail - security update

The remote Debian 10 / 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5167 advisory. - A Privilege Context Switching issue was discovered in join.c in Firejail 0.9.68. By crafting a bogus Firejail container that is accepted by the Firejail setuid-root...

7.8CVSS7.4AI score0.0007EPSS
Exploits0References7
Tenable Nessus
Tenable Nessus
added 2022/06/22 12:0 a.m.36 views

openSUSE 15 Security Update : firejail (openSUSE-SU-2022:10015-1)

The remote SUSE Linux SUSE15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE-SU-2022:10015-1 advisory. - A Privilege Context Switching issue was discovered in join.c in Firejail 0.9.68. By crafting a bogus Firejail container that is accepted by the...

7.8CVSS7.4AI score0.0007EPSS
Exploits0References4
OSV
OSV
added 2022/06/09 4:15 p.m.1 views

DEBIAN-CVE-2022-31214

A Privilege Context Switching issue was discovered in join.c in Firejail 0.9.68. By crafting a bogus Firejail container that is accepted by the Firejail setuid-root program as a join target, a local attacker can enter an environment in which the Linux user namespace is still the initial user...

7.8CVSS7.5AI score0.0007EPSS
Exploits0References1
Prion
Prion
added 2022/06/09 4:15 p.m.13 views

Design/Logic Flaw

A Privilege Context Switching issue was discovered in join.c in Firejail 0.9.68. By crafting a bogus Firejail container that is accepted by the Firejail setuid-root program as a join target, a local attacker can enter an environment in which the Linux user namespace is still the initial user...

7.2CVSS7.5AI score0.0007EPSS
Exploits0References8Affected Software3
UbuntuCve
UbuntuCve
added 2022/06/09 4:15 p.m.23 views

CVE-2022-31214

A Privilege Context Switching issue was discovered in join.c in Firejail 0.9.68. By crafting a bogus Firejail container that is accepted by the Firejail setuid-root program as a join target, a local attacker can enter an environment in which the Linux user namespace is still the initial user...

7.8CVSS7.2AI score0.0007EPSS
Exploits0References2
CVE
CVE
added 2022/06/09 12:0 a.m.108 views

CVE-2022-31214

Firejail (version 0.9.68 affected) has a Privilege Context Switching flaw in join.c that lets a local user exploit a crafted join target to drop out of the initial user namespace and gain root privileges via setuid-root binaries. mitigations rely on upgrading to patched releases (e.g., Firejail 0...

7.8CVSS7.4AI score0.0007EPSS
Exploits0References8Affected Software1
Cvelist
Cvelist
added 2022/06/09 12:0 a.m.11 views

CVE-2022-31214

A Privilege Context Switching issue was discovered in join.c in Firejail 0.9.68. By crafting a bogus Firejail container that is accepted by the Firejail setuid-root program as a join target, a local attacker can enter an environment in which the Linux user namespace is still the initial user...

7.8AI score0.0007EPSS
Exploits0References8
Rows per page
Query Builder