Vulnerabilities > Netflix

DATE CVE VULNERABILITY TITLE RISK
2024-09-27 CVE-2024-9301 Path Traversal vulnerability in Netflix E2Nest
A path traversal issue in E2Nest prior to commit 8a41948e553c89c56b14410c6ed395e9cfb9250a
network
low complexity
netflix CWE-22
7.5
2023-08-17 CVE-2023-40171 Information Exposure Through an Error Message vulnerability in Netflix Dispatch
Dispatch is an open source security incident management tool.
network
low complexity
netflix CWE-209
7.5
2023-04-19 CVE-2023-30797 Use of Insufficiently Random Values vulnerability in Netflix Lemur
Netflix Lemur before version 1.3.2 used insufficiently random values when generating default credentials.
network
low complexity
netflix CWE-330
7.5
2022-04-01 CVE-2022-27177 Use of Externally-Controlled Format String vulnerability in Netflix Consoleme
A Python format string issue leading to information disclosure and potentially remote code execution in ConsoleMe for all versions prior to 1.2.2
network
low complexity
netflix CWE-134
7.5
2021-03-23 CVE-2021-28100 Unspecified vulnerability in Netflix Priam
Priam uses File.createTempFile, which gives the permissions on that file -rw-r--r--.
local
low complexity
netflix
2.1
2021-03-23 CVE-2021-28099 Use of Insufficiently Random Values vulnerability in Netflix Hollow
In Netflix OSS Hollow, since the Files.exists(parent) is run before creating the directories, an attacker can pre-create these directories with wide permissions.
local
low complexity
netflix CWE-330
4.4
2020-12-03 CVE-2020-2323 Missing Authorization vulnerability in Netflix Chaos Monkey 0.3/0.4
Jenkins Chaos Monkey Plugin 0.4 and earlier does not perform permission checks in an HTTP endpoint, allowing attackers with Overall/Read permission to access the Chaos Monkey page and to see the history of actions.
network
low complexity
netflix CWE-862
5.3
2020-12-03 CVE-2020-2322 Missing Authorization vulnerability in Netflix Chaos Monkey 0.3
Jenkins Chaos Monkey Plugin 0.3 and earlier does not perform permission checks in several HTTP endpoints, allowing attackers with Overall/Read permission to generate load and to generate memory leaks.
network
low complexity
netflix CWE-862
7.5
2020-11-09 CVE-2020-9300 Unspecified vulnerability in Netflix Dispatch
The Access Control issues include allowing a regular user to view a restricted incident, user role escalation to admin, users adding themselves as a participant in a restricted incident, and users able to view restricted incidents via the search feature.
network
low complexity
netflix
4.0
2020-11-09 CVE-2020-9299 Cross-site Scripting vulnerability in Netflix Dispatch
There were XSS vulnerabilities discovered and reported in the Dispatch application, affecting name and description parameters of Incident Priority, Incident Type, Tag Type, and Incident Filter.
network
netflix CWE-79
3.5