Overview 65 matches · 1 in Waratek scope · 0 protected · 2 exploited · 2 CISA KEV · 3 public PoC · 0 EPSS ≥ 0.5
65matches
1in Waratek scope1.5%
0protected0.0%
2exploited3.1%
2CISA KEV3.1%
3public PoC4.6%
0EPSS ≥ 0.50.0%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
1
1.5%
Outside Waratek scope
0
0.0%
Not applicable
64
98.5%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
65
100.0%
not established
0
0.0%
unrecorded
0
0.0%
split by
peak 14 / quarter
Q3 221
Not applicable1
High1
not blocked1
No public exploit1
Q4 220
Q1 231
Not applicable1
High1
not blocked1
No public exploit1
Q2 232
Not applicable2
High2
not blocked2
No public exploit2
Q3 231
Not applicable1
High1
not blocked1
No public exploit1
Q4 231
Not applicable1
High1
not blocked1
No public exploit1
Q1 240
Q2 243
Not applicable3
High3
not blocked3
Proof of concept only1
No public exploit2
Q3 242
Not applicable2
High2
not blocked2
Working exploit published1
No public exploit1
Q4 243
Not applicable3
High3
not blocked3
Proof of concept only1
No public exploit2
Q1 255
Not applicable5
High5
not blocked5
No public exploit5
Q2 255
Not applicable5
High5
not blocked5
No public exploit5
Q3 253
Not applicable3
High3
not blocked3
No public exploit3
Q4 250
Q1 262
Not applicable2
High2
not blocked2
Proof of concept only1
No public exploit1
Q2 269
No exploit published1
Not applicable8
High9
not blocked9
Exploited1
Working exploit published1
Proof of concept only1
No public exploit6
Q3 2613
Not applicable13
High13
not blocked13
Exploited1
Proof of concept only1
No public exploit11
Q4 2614
Not applicable14
High14
not blocked14
Proof of concept only1
No public exploit13
Q4 22Q2 23Q4 23Q2 24Q4 24Q2 25Q4 25Q2 26Q4 26
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2026-57892 | High | 2026-11-10 | Not applicable | No public exploit | Insufficient granularity of access control in the MigTD v2 policy evaluation engine for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow an escalation of privilege. Network adversary with an unauthenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via adjacent access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (high) and availability (none) impacts. |
| CVE-2026-122169 | High | 2026-11-10 | Not applicable | No public exploit | Insufficient granularity of access control in Windows IKE Extension allows an authorized attacker to perform spoofing locally. |
| CVE-2026-109797 | High | 2026-11-10 | Not applicable | No public exploit | In SAP/astonish, an authenticated user could potentially identify and operate on another team�s sandbox containers because of improper tenant isolation in the legacy Incus sandbox-management API handlers. The affected handlers did not use the tenant-aware session lookup path, allowing cross-tenant container operations such as listing, exposing or proxying, and deleting containers.The issue affects only the legacy Incus backend. Kubernetes and OpenShell deployments are not affected because the relevant Incus-specific handlers are unavailable there. |
| CVE-2026-123803 | High | 2026-11-09 | Not applicable | No public exploit | SuperTokens Core is an open source authentication server. From 10.1.0 until 11.0.9, 11.1.4, 11.2.4, 11.3.8, 11.4.8, 12.0.11, 12.1.2, 12.2.1, and 12.3.1, loadOptionsById_Transaction and getUserInfoByCredentialId_Transaction perform application-scoped WebAuthn lookups without constraining them to the requested tenant, and WebAuthN.signIn does not verify tenant membership. In a multi-tenant deployment using WebAuthn with a shared user pool, an ordinary user who possesses their own valid passkey in one tenant can submit its assertion to another tenant's sign-in endpoint in the same application and be authenticated there despite having no membership in the target tenant. This issue is fixed in versions 11.0.9, 11.1.4, 11.2.4, 11.3.8, 11.4.8, 12.0.11, 12.1.2, 12.2.1, and 12.3.1. |
| CVE-2026-123802 | High | 2026-11-09 | Not applicable | No public exploit | SuperTokens Core is an open source authentication server. From 11.3.0 until 11.3.8, 11.4.8, 12.0.11, 12.1.2, 12.2.1, and 12.3.1, a licensed deployment with a configured SAML client can authenticate an identity from an assertion that did not satisfy the audience check. When the identity provider uses assertion-level signing, an attacker who has a still-valid IdP-signed assertion naming the victim for any audience and the attacker's own valid assertion for the target audience can combine them because validateSamlResponseAudience accepts an audience from one assertion while extractAllClaims takes the final NameID and attributes from another; response-level signing does not expose this multi-assertion variant. Independently, an assertion from an identity provider configured for the target deployment but issued to another SuperTokens deployment using the shared default saml_sp_entity_id can satisfy the target's audience check. Successful exploitation authenticates the attacker as the victim IdP user. This issue is fixed in versions 11.3.8, 11.4.8, 12.0.11, 12.1.2, 12.2.1, and 12.3.1. |
| CVE-2026-77779 | High | 2026-11-04 | Not applicable | No public exploit | ManageEngine Key Manager Plus versions before 7151 were vulnerable to an Improper Access Control vulnerability that allowed authenticated low-privilege users to export keys outside their authorized scope. |
| CVE-2026-77778 | High | 2026-11-03 | Not applicable | No public exploit | ZohoCorp ManageEngine Key Manager Plus versions up to 7150 allow authenticated users to export certificates belonging to other users to their own registered key vaults. |
| CVE-2026-77777 | High | 2026-11-03 | Not applicable | No public exploit | ManageEngine Key Manager Plus versions before 7151 are vulnerable to an improper access control issue that allow authenticated users to modify another user's ACME certificate deployment credentials. |
| CVE-2026-57202 | High | 2026-10-27 | Not applicable | No public exploit | Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an authenticated Asterisk REST Interface (ARI) attacker with read-only privileges may use `setChannelVar` to execute write dialplan functions, including `FILE()` writes, even when `live_dangerously` in `asterisk.conf` is set to no. The Asterisk HTTP web server must be enabled and reachable, and the attacker must already have valid `read-only ARI credentials`. HTTP is disabled by default and binds only to 127.0.0.1 by default even when enabled. This issue is fixed in Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3. |
| CVE-2026-111885 | High | 2026-10-17 | Not applicable | Proof of concept only | phpMyFAQ from 4.2.0-alpha before 4.2.0-beta contains a missing authorization vulnerability in GroupController::deleteGroup() that omits privilege-level checks on target groups. Authenticated non-SuperAdmin administrators holding GROUP_DELETE can send a crafted groupId to /admin/api/group/delete to permanently destroy higher-privileged groups and strip members' inherited rights. |
| CVE-2026-103509 | High | 2026-10-15 | Not applicable | No public exploit | P4 Search (formerly Helix Search) returns stored credentials in cleartext through its configuration API to users with administrative privileges on the connected P4 Server, allowing privilege escalation. This affects 2026.4.2 and earlier and is fixed in 2026.4.3. |
| CVE-2026-83499 | High | 2026-10-13 | Not applicable | No public exploit | Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-81969 | High | 2026-10-13 | Not applicable | No public exploit | Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70218 | High | 2026-10-13 | Not applicable | No public exploit | Insufficient granularity of access control in Windows StateRepository API allows an authorized attacker to elevate privileges locally. |
| CVE-2026-86830 | High | 2026-09-14 | Not applicable | No public exploit | Incorrect privilege assignment in Temporary Elevated Access Management (TEAM) for AWS IAM Identity Center solution before version 1.5.1 might allow an authenticated remote user with application-level access to read, approve, modify, or revoke arbitrary access requests, thereby obtaining unintended temporary elevated access to the AWS accounts accessed using the TEAM deployment. This issue has been addressed in TEAM version 1.5.1 or later. We recommend upgrading to the latest version and ensuring any forked or derivative code is patched to incorporate the new fixes. |
| CVE-2026-77480 | High | 2026-09-08 | Not applicable | No public exploit | Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-66814 | High | 2026-09-08 | Not applicable | No public exploit | Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-15431 | High | 2026-09-03 | Not applicable | No public exploit | A potential security vulnerability has been identified in the HP Support Assistant for versions prior to 9.53.2.0. The vulnerability could potentially allow a local attacker to escalate privileges due to insufficient access controls. |
| CVE-2026-78122 | High | 2026-08-22 | Not applicable | Proof of concept only | docker-socket-proxy fails to properly gate read endpoints in the /containers Docker API namespace when the CONTAINERS environment variable is set. Attackers can use GET requests to /containers/{id}/archive, /containers/{id}/export, /containers/{id}/logs, and /containers/{id}/top to read arbitrary files and download entire container filesystems as tar archives. |
| CVE-2026-40145 | High | 2026-08-17 | Not applicable | No public exploit | A vulnerability exists in the interaction between a Endpoint Privilege Management (Windows Deployment) support utility and the agent's tamper protection controls. Under certain conditions, the protections applied to the utility process may not be enforced as intended. |
| CVE-2026-62721 | High | 2026-08-11 | Not applicable | No public exploit | Insufficient granularity of access control in User-Mode Power Service (UMPS) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-56155 | High | 2026-07-14 | Not applicable | Exploited | Insufficient granularity of access control in Active Directory Federation Services (AD FS) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-55006 | High | 2026-07-14 | Not applicable | No public exploit | Insufficient granularity of access control in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50502 | High | 2026-07-14 | Not applicable | No public exploit | Insufficient granularity of access control in Windows Event Logging Service allows an authorized attacker to execute code over a network. |
| CVE-2026-50405 | High | 2026-07-14 | Not applicable | No public exploit | Insufficient granularity of access control in Windows Filtering Platform (WFP) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-49170 | High | 2026-07-14 | Not applicable | No public exploit | Insufficient granularity of access control in Windows StateRepository API allows an authorized attacker to elevate privileges locally. |
| CVE-2026-48581 | High | 2026-07-14 | Not applicable | No public exploit | Insufficient granularity of access control in Microsoft Surface allows an authorized attacker to elevate privileges locally. |
| CVE-2021-46747 | High | 2026-06-01 | Not applicable | No public exploit | Insufficient granularity of access control in ASP (AMD Secure Processor) may allow an attacker with an untrusted user space application to map sensitive SMN (System Management Network) apertures leading to a potential escalation of privileges. |
| CVE-2025-54518 | High | 2026-05-15 | Not applicable | No public exploit | Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow an attacker to corrupt instructions executed at a different privilege level, potentially resulting in privilege escalation. |
| CVE-2024-21962 | High | 2026-05-15 | Not applicable | No public exploit | Improper Input Validation in the AMD RAID driver could allow an attacker to point to an arbitrary memory location potentially resulting in privilege escalation and arbitrary code execution. |
| CVE-2026-40365 | High | 2026-05-12 | Not applicable | No public exploit | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. |
| CVE-2026-35436 | High | 2026-05-12 | Not applicable | No public exploit | Use after free in Microsoft Office allows an authorized attacker to elevate privileges locally. |
| CVE-2026-40981 | High | 2026-05-07 | No exploit published | No public exploit | When using Google Secrets Manager as a backend for the Spring Cloud Config server a client can craft a request to the config server potentially exposing secrets from unintended GCP projects. Spring Cloud Config 3.1.x: affected from 3.1.0 through 3.1.13 (inclusive); upgrade to 3.1.14 or greater (Enterprise Support Only). Spring Cloud Config 4.1.x: affected from 4.1.0 through 4.1.9 (inclusive); upgrade to 4.1.10 or greater (Enterprise Support Only). Spring Cloud Config 4.2.x: affected from 4.2.0 through 4.2.6 (inclusive); upgrade to 4.2.7 or greater (Enterprise Support Only). Spring Cloud Config 4.3.x: affected from 4.3.0 through 4.3.2 (inclusive); upgrade to 4.3.3 or greater. Spring Cloud Config 5.0.x: affected from 5.0.0 through 5.0.2 (inclusive); upgrade to 5.0.3 or greater. |
| CVE-2026-41326 | High | 2026-04-24 | Not applicable | Proof of concept only | Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs) that perform like containers. From v3.4.0 to v3.28.0, an oversight in the CopyFile policy (and perhaps the CopyFile handler) allows untrusted hosts to write to arbitrary locations inside the guest workload image. This can be used to overwrite binaries inside the guest and exfiltrate data from containers; even those running inside CVMs. This vulnerability is fixed in v3.29.0. |
| CVE-2026-33825 | High | 2026-04-14 | Not applicable | Exploited | Insufficient granularity of access control in Microsoft Defender allows an authorized attacker to elevate privileges locally. |
| CVE-2026-39363 | High | 2026-04-07 | Not applicable | Working exploit published | Vite is a frontend tooling framework for JavaScript. From 6.0.0 to before 6.4.2, 7.3.2, and 8.0.5, if it is possible to connect to the Vite dev server’s WebSocket without an Origin header, an attacker can invoke fetchModule via the custom WebSocket event vite:invoke and combine file://... with ?raw (or ?inline) to retrieve the contents of arbitrary files on the server as a JavaScript string (e.g., export default "..."). The access control enforced in the HTTP request path (such as server.fs.allow) is not applied to this WebSocket-based execution path. This vulnerability is fixed in 6.4.2, 7.3.2, and 8.0.5. |
| CVE-2025-69196 | High | 2026-03-16 | Not applicable | Proof of concept only | FastMCP is the standard framework for building MCP applications. Prior to version 2.14.2, the server does not properly respect the resource parameter submitted by the client in the authorization and token request. Instead of issuing the token explicitly for the MCP server, the token is issued for the base_url passed to the OAuthProxy during initialization. This issue has been patched 2.14.2. |
| CVE-2025-35998 | High | 2026-02-10 | Not applicable | No public exploit | Missing protection mechanism for alternate hardware interface in the Intel(R) Quick Assist Technology for some Intel(R) Platforms within Ring 0: Kernel may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts. |
| CVE-2024-21947 | High | 2025-09-06 | Not applicable | No public exploit | Improper input validation in the system management mode (SMM) could allow a privileged attacker to overwrite arbitrary memory potentially resulting in arbitrary code execution at the SMM level. |
| CVE-2025-22839 | High | 2025-08-12 | Not applicable | No public exploit | Insufficient granularity of access control in the OOB-MSM for some Intel(R) Xeon(R) 6 Scalable processors may allow a privileged user to potentially enable escalation of privilege via adjacent access. |
| CVE-2025-3648 | High | 2025-07-08 | Not applicable | No public exploit | A vulnerability has been identified in the Now Platform that could result in data being inferred without authorization. Under certain conditional access control list (ACL) configurations, this vulnerability could enable unauthenticated and authenticated users to use range query requests to infer instance data that is not intended to be accessible to them. To assist customers in enhancing access controls, ServiceNow has introduced additional access control frameworks in Xanadu and Yokohama, such as Query ACLs, Security Data Filters and Deny-Unless ACLs. Additionally, in May 2025, ServiceNow delivered to customers a security update that is designed to enhance customer ACL configurations. Customers, please review the KB Articles in the References section. |
| CVE-2025-5982 | High | 2025-06-12 | Not applicable | No public exploit | An issue has been discovered in GitLab EE affecting all versions from 12.0 before 17.10.8, 17.11 before 17.11.4, and 18.0 before 18.0.2. Under certain conditions users could bypass IP access restrictions and view sensitive information. |
| CVE-2025-4979 | High | 2025-05-22 | Not applicable | No public exploit | An issue has been discovered in GitLab CE/EE affecting all versions before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1. An attacker may be able to reveal masked or hidden CI variables (that they did not author) in the WebUI, by simply creating their own variable and observing the HTTP response. |
| CVE-2025-1278 | High | 2025-05-09 | Not applicable | No public exploit | An issue has been discovered in GitLab CE/EE affecting all versions from 12.0 before 17.9.8, 17.10 before 17.10.6, and 17.11 before 17.11.2. Under certain conditions users could bypass IP access restrictions and view sensitive information. |
| CVE-2024-33058 | High | 2025-04-07 | Not applicable | No public exploit | Memory corruption while assigning memory from the source DDR memory(HLOS) to ADSP. |
| CVE-2025-29987 | High | 2025-04-03 | Not applicable | No public exploit | Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) versions prior to 8.3.0.15 contain an Insufficient Granularity of Access Control vulnerability. An authenticated user from a trusted remote client could exploit this vulnerability to execute arbitrary commands with root privileges. |
| CVE-2025-20111 | High | 2025-02-26 | Not applicable | No public exploit | A vulnerability in the health monitoring diagnostics of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an unauthenticated, adjacent attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to the incorrect handling of specific Ethernet frames. An attacker could exploit this vulnerability by sending a sustained rate of crafted Ethernet frames to an affected device. A successful exploit could allow the attacker to cause the device to reload. |
| CVE-2023-31343 | High | 2025-02-11 | Not applicable | No public exploit | Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM, potentially leading to arbitrary code execution. |
| CVE-2023-31342 | High | 2025-02-11 | Not applicable | No public exploit | Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM, potentially leading to arbitrary code execution. |
| CVE-2024-53295 | High | 2025-02-01 | Not applicable | No public exploit | Dell PowerProtect DD versions prior to 8.3.0.0, 7.10.1.50, and 7.13.1.20 contain an improper access control vulnerability. A local malicious user with low privileges could potentially exploit this vulnerability leading to escalation of privilege. |
| CVE-2024-13256 | High | 2025-01-09 | Not applicable | No public exploit | Insufficient Granularity of Access Control vulnerability in Drupal Email Contact allows Forceful Browsing.This issue affects Email Contact: from 0.0.0 before 2.0.4. |
| CVE-2024-52799 | High | 2024-11-21 | Not applicable | Proof of concept only | Argo Workflows Chart is used to set up argo and its needed dependencies through one command. Prior to 0.44.0, the workflow-role has excessive privileges, the worst being create pods/exec, which will allow kubectl exec into any Pod in the same namespace, i.e. arbitrary code execution within those Pods. If a user can be made to run a malicious template, their whole namespace can be compromised. This affects versions of the argo-workflows Chart that use appVersion: 3.4 and above, which no longer need these permissions for the only available Executor, Emissary. It could also affect users below 3.4 depending on their choice of Executor in those versions. This only affects the Helm Chart and not the upstream manifests. This vulnerability is fixed in 0.44.0. |
| CVE-2024-8927 | High | 2024-10-08 | Not applicable | No public exploit | In PHP versions 8.1.* before 8.1.30, 8.2.* before 8.2.24, 8.3.* before 8.3.12, HTTP_REDIRECT_STATUS variable is used to check whether or not CGI binary is being run by the HTTP server. However, in certain scenarios, the content of this variable can be controlled by the request submitter via HTTP headers, which can lead to cgi.force_redirect option not being correctly applied. In certain configurations this may lead to arbitrary file inclusion in PHP. |
| CVE-2024-43604 | High | 2024-10-08 | Not applicable | No public exploit | Outlook for Android Elevation of Privilege Vulnerability |
| CVE-2024-42365 | High | 2024-08-08 | Not applicable | Working exploit published | Asterisk is an open source private branch exchange (PBX) and telephony toolkit. Prior to asterisk versions 18.24.2, 20.9.2, and 21.4.2 and certified-asterisk versions 18.9-cert11 and 20.7-cert2, an AMI user with `write=originate` may change all configuration files in the `/etc/asterisk/` directory. This occurs because they are able to curl remote files and write them to disk, but are also able to append to existing files using the `FILE` function inside the `SET` application. This issue may result in privilege escalation, remote code execution and/or blind server-side request forgery with arbitrary protocol. Asterisk versions 18.24.2, 20.9.2, and 21.4.2 and certified-asterisk versions 18.9-cert11 and 20.7-cert2 contain a fix for this issue. |
| CVE-2024-39323 | High | 2024-07-02 | Not applicable | No public exploit | aimeos/ai-admin-graphql is the Aimeos GraphQL API admin interface. Starting in version 2022.04.01 and prior to versions 2022.10.10, 2023.10.6, and 2024.04.6, an improper access control vulnerability allows an editor to modify and take over an admin account in the back end. Versions 2022.10.10, 2023.10.6, and 2024.04.6 fix this issue. |
| CVE-2024-5389 | High | 2024-06-09 | Not applicable | Proof of concept only | In lunary-ai/lunary version 1.2.13, an insufficient granularity of access control vulnerability allows users to create, update, get, and delete prompt variations for datasets not owned by their organization. This issue arises due to the application not properly validating the ownership of dataset prompts and their variations against the organization or project of the requesting user. As a result, unauthorized modifications to dataset prompts can occur, leading to altered or removed dataset prompts without proper authorization. This vulnerability impacts the integrity and consistency of dataset information, potentially affecting the results of experiments. |
| CVE-2023-45217 | High | 2024-05-16 | Not applicable | No public exploit | Improper access control in Intel(R) Power Gadget software for Windows all versions may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2023-40070 | High | 2024-05-16 | Not applicable | No public exploit | Improper access control in some Intel(R) Power Gadget software for macOS all versions may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2023-44285 | High | 2023-12-14 | Not applicable | No public exploit | Dell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an improper access control vulnerability. A local malicious user with low privileges could potentially exploit this vulnerability leading to escalation of privilege. |
| CVE-2023-33127 | High | 2023-07-11 | Not applicable | No public exploit | .NET and Visual Studio Elevation of Privilege Vulnerability |
| CVE-2023-0205 | High | 2023-04-22 | Not applicable | No public exploit | NVIDIA ConnectX-5, ConnectX-6, and ConnectX6-DX contain a vulnerability in the NIC firmware, where an unprivileged user can exploit insufficient granularity of access control, which may lead to denial of service. |
| CVE-2023-0203 | High | 2023-04-22 | Not applicable | No public exploit | NVIDIA ConnectX-5, ConnectX-6, and ConnectX6-DX contain a vulnerability in the NIC firmware, where an unprivileged user can exploit insufficient granularity of access control, which may lead to denial of service. |
| CVE-2023-27591 | High | 2023-03-17 | Not applicable | No public exploit | Miniflux is a feed reader. Prior to version 2.0.43, an unauthenticated user can retrieve Prometheus metrics from a publicly reachable Miniflux instance where the `METRICS_COLLECTOR` configuration option is enabled and `METRICS_ALLOWED_NETWORKS` is set to `127.0.0.1/8` (the default). A patch is available in Miniflux 2.0.43. As a workaround, set `METRICS_COLLECTOR` to `false` (default) or run Miniflux behind a trusted reverse-proxy. |
| CVE-2022-36110 | High | 2022-09-09 | Not applicable | No public exploit | Netmaker makes networks with WireGuard. Prior to version 0.15.1, Improper Authorization functions lead to non-privileged users running privileged API calls. If someone adds users to the Netmaker platform who do not have admin privileges, they can use their auth tokens to run admin-level functions via the API. This problem has been patched in v0.15.1. |