CVE-2021-35483

The Applications component of Nokia IMPACT version through 19.11.2.10-20210118042150283 allows an authenticated user to arbitrarily upload JavaScript files via the /ui/rest-proxy/application fileupload parameter. This can occur during the adding of a new application, or during the editing of an...

CVE-2021-35485

The Applications component of Nokia IMPACT version through 19.11.2.10-20210118042150283 allows an authenticated user to arbitrarily upload server-side executable files via the /ui/rest-proxy/application fileupload parameter. This can occur during the adding of a new application, or during the...

CVE-2021-35486

A Cross-Site Request Forgery CSRF vulnerability in Nokia IMPACT through 19.11.2.10-20210118042150283 allows a remote attacker to import and overwrite the entire application configuration. Specifically, in /ui/rest-proxy/entity/import, neither the X-CSRF-NONCE HTTP header nor the CSRF-NONCE cookie...

EUVD-2021-22125

The Applications component of Nokia IMPACT version through 19.11.2.10-20210118042150283 allows an authenticated user to arbitrarily upload JavaScript files via the /ui/rest-proxy/application fileupload parameter. This can occur during the adding of a new application, or during the editing of an...

CVE-2021-35486

A Cross-Site Request Forgery CSRF vulnerability in Nokia IMPACT through 19.11.2.10-20210118042150283 allows a remote attacker to import and overwrite the entire application configuration. Specifically, in /ui/rest-proxy/entity/import, neither the X-CSRF-NONCE HTTP header nor the CSRF-NONCE cookie...

CVE-2021-35486

A Cross-Site Request Forgery CSRF vulnerability in Nokia IMPACT through 19.11.2.10-20210118042150283 allows a remote attacker to import and overwrite the entire application configuration. Specifically, in /ui/rest-proxy/entity/import, neither the X-CSRF-NONCE HTTP header nor the CSRF-NONCE cookie...

PT-2026-22760

The Applications component of Nokia IMPACT version through 19.11.2.10-20210118042150283 allows an authenticated user to arbitrarily upload server-side executable files via the /ui/rest-proxy/application fileupload parameter. This can occur during the adding of a new application, or during the...

CVE-2021-35486

A Cross-Site Request Forgery CSRF vulnerability in Nokia IMPACT through 19.11.2.10-20210118042150283 allows a remote attacker to import and overwrite the entire application configuration. Specifically, in /ui/rest-proxy/entity/import, neither the X-CSRF-NONCE HTTP header nor the CSRF-NONCE cookie...

CVE-2021-35484: Improper Neutralization of Special Elements used in an SQL Command

Nokia IMPACT through 19.11.2.10-20210118042150283 allows an authenticated user to perform a Time-based Boolean Blind SQL Injection attack on the endpoint /ui/rest-proxy/campaign/statistic for the View Campaign page via the sortColumn HTTP GET parameter. This allows an attacker to access sensitive...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: confluent-common-docker, container-object-storage-interface, linkerd2-proxy-init, addon-resizer, terraform-provider-time, bank-vaults, octo-sts, custom-pod-autoscaler-operator, docker-credential-ecr-login, newrelic-nri-statsd, k8sgpt-operator, gostatsd,...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: nvidia-nsight-compute-13.1, sftpgo-plugin-geoipfilter, memcached-exporter-fips, prometheus-adapter, bank-vaults, azurefile-csi-fips, php-fpmexporter, prometheus-bind-exporter, confluent-common-docker, kube-logging-operator-custom-runner-fips, nemo, azuredisk-csi-fips...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: nvidia-nsight-compute-13.1, sftpgo-plugin-geoipfilter, memcached-exporter-fips, prometheus-adapter, bank-vaults, azurefile-csi-fips, php-fpmexporter, prometheus-bind-exporter, confluent-common-docker, kube-logging-operator-custom-runner-fips, nemo, azuredisk-csi-fips...

arcor2-execution-rest-proxy (>=0.8.1, <=0.16.0), crfm-helm (>=0.1.0, <=0.5.4) +8 more potentially affected by CVE-2024-35515 via sqlitedict (1.7.0)

sqlitedict PYPI version 1.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on sqlitedict and may be impacted: - arcor2-execution-rest-proxy =0.8.1, =0.1.0, =0.0.1, =0.1.1, =0.1.3, =0.5.9, =0.1.0, =0.0.1.3, =0.0.1.320220108150357 Source cves:...

GNOME librest Denial of Service Vulnerability

GNOME librest is a RESTful Software Architecture Style web service helper library for the GNOME project. A security vulnerability exists in the Oauth implementation of GNOME librest prior to version 0.7.93, which stems from the program failing to properly truncate the pointer returned by the...

DEBIAN-CVE-2015-2675

The OAuth implementation in librest before 0.7.93 incorrectly truncates the pointer returned by the restproxycallgeturl function, which allows remote attackers to cause a denial of service application crash via running the EnsureCredentials method from the org.gnome.OnlineAccounts.Account interfa...

GNOME librest 'rest_proxy_call_get_url()' memory corruption vulnerability

GNOME librest is a RESTful software architecture style web service helper library for the GNOME project. A memory corruption vulnerability exists in GNOME librest. An attacker could use this vulnerability to execute arbitrary code in the context of an application, which could also result in a...