6 matches found
CVE-2018-1002105
CMPT733-Group110x90 CVE-2018-1002105 팀원 : Abhishek Rungta, Shubham Saini, Siddhant Sood 환경 설정 linux VM 예: Ubuntu 20.04 로컬 kubernetes 배포용 Minikube 다음의 이전 버전 중 하나1.0.x— 1.9.x, 1.10.0—1.10.10,1.11.0—1.11.4,1.12.0—1.12.2 익스플로잇 실행 가상 박스 이미지.ova 파일를 제공했습니다. 다운로드하여 VM을 생성하세요. 제공된 ova는 docker v18.09 및...
CVE-2026-55676 Malcolm vulnerable to RCE via unrestricted .php upload to the file-upload component
Malcolm is a network traffic analysis tool suite. The file-upload component FilePond PHP backend accepts uploads at POST /server/php/submit.php and stores them in a directory served by the same nginx and php-fpm instance. The allow-list that should restrict accepted file types is an empty array b...
CVE-2026-59093 Weaviate < 1.38.0 - Privilege Escalation via Unchecked Permissions in RBAC Role Assignment
Weaviate before 1.38.0 does not verify that a principal performing an RBAC role assignment holds the permissions granted by the assigned role. The assignRoleToUser and assignRoleToGroup handlers POST /authz/users/id/assign and /authz/groups/id/assign authorize only that the caller may assign role...
Jenkins Enterprise and Operations Center < 2.249.31.0.5 / 2.289.1.2 Multiple Vulnerabilities (CloudBees Security Advisory 2021-06-02)
The version of Jenkins Enterprise or Jenkins Operations Center running on the remote web server is 2.249.x prior to 2.249.31.0.5, or 2.x prior to 2.289.1.2. It is, therefore, affected by multiple vulnerabilities, including the following: - A flaw exists in CloudBees Jenkins due to RBAC role...
CVE-2017-2296: Improper Input Validation
In Puppet Enterprise 2017.1.x and 2017.2.1, using specially formatted strings with certain formatting characters as Classifier node group names or RBAC role display names causes errors, effectively causing a DOS to the service. This was resolved in Puppet Enterprise 2017.2.2...
