Vulnerabilities (CVE)

Filtered by CWE-863
Total 2342 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-6782 2024-08-06 N/A 9.8 CRITICAL
Improper access control in Calibre 6.9.0 ~ 7.14.0 allow unauthenticated attackers to achieve remote code execution.
CVE-2022-2220 1 Redhat 1 Openshift Container Platform 2024-02-04 N/A N/A
OpenShift doesn't properly verify subdomain ownership, which allows route takeover. Once a custom route is created, the user must update the DNS provider by creating a canonical name (CNAME) record (if he likes to expose this route externally). The CNAME record should point the custom domain to the OpenShift router as the alias. In a case that the CNAME is not removed when the route is not in use anymore we are dealing with a dangling route. A malicious actor may take over the route.