CVEs on Anthony Weems

CVE-2021-25746: Ingress-nginx directive injection via annotations

Fri, 22 Apr 2022 00:00:00 +0000

A user that can create or update ingress objects can use .metadata.annotations in an Ingress object (in the networking.k8s.io or extensions API group) to obtain the credentials of the ingress-nginx controller. In the default configuration, that credential has access to all secrets in the cluster.

CVE-2022-21496: Improper Implementation of the LDAP URI Specification Allowing for Host Validation Bypasses

Tue, 19 Apr 2022 00:00:00 +0000

A parser differential between com.sun.jndi.ldap.LdaoURL and java.net.URI may lead to LDAP URI validation bypasses.

CVE-2022-21701: Istio Privileged Escalation in Kubernetes Gateway API

Tue, 18 Jan 2022 00:00:00 +0000

Istio version 1.12.0 and 1.12.1 are vulnerable to a privilege escalation attack. Users who have CREATE permission for gateways.gateway.networking.k8s.io objects can escalate this privilege to create other resources that they may not have access to, such as Pod.

CVE-2019-18818: strapi Password Reset Auth Bypass

Thu, 07 Nov 2019 00:00:00 +0000

strapi before 3.0.0-beta.17.5 mishandles password resets within default authentication controllers.

CVE-2019-1003040: Jenkins Script Security plugin sandbox escape

Thu, 28 Mar 2019 00:00:00 +0000

Sandbox projection in the “Script Security and Pipeline: Groovy Plugins” could be circumvented through methods supporting type casts and type coercion. This allowed attackers to invoke constructors for arbitrary types.

CVE-2018-2813: MySQL Missing Privilege Check

Fri, 15 Dec 2017 00:00:00 +0000

Privilege escalation in MySQL server due to a missing file permission check.

CVE-2016-7063: Pritunl Privilege Escalation via Path Traversal

Tue, 23 Aug 2016 00:00:00 +0000

The Pritunl Client service accepted configuration data which was saved to a file. The service, running as root, would write user specified data to the user specified path, leading to privilege escalation.

CVE-2016-7064: Pritunl Invalid Signature Verification

Tue, 23 Aug 2016 00:00:00 +0000

The Pritunl Client did not validate VPN server certificates before initiating a VPN connection.

CVE-2016-4991: Command injection in NodePDF

Tue, 24 May 2016 00:00:00 +0000

NodePDF passes filenames to child_process.exec(), however, it does not properly encode all special characters.

CVE-2015-5238: Stack overflow in libtre5

Wed, 01 Jul 2015 00:00:00 +0000

A buffer overflow exists in tre_parse() when parsing a literal (e.g. \x{deadbeef}), used during regular expression compilation.