https://vulnogram.org/ Most recent CVEs assigned by Netflix, Inc. (netflix). https://vulnogram.org/seaview/icons/netflix.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2024-9301 https://vulnogram.org/CVE-2024-9301 A path traversal issue in E2Nest prior to commit 8a41948e553c89c56b14410c6ed395e9cfb9250a High Network Exploitable Fri, 27 Sep 2024 17:41:49 GMT https://vulnogram.org/CVE-2024-7093 https://vulnogram.org/CVE-2024-7093 Dispatch's notification service uses Jinja templates to generate messages to users. Jinja permits code execution within blocks, which were neither properly sanitized nor sandboxed. This vulnerability enables users to construct command line scripts in… Critical Thu, 01 Aug 2024 21:07:35 GMT https://vulnogram.org/CVE-2024-5023 https://vulnogram.org/CVE-2024-5023 Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Netflix ConsoleMe allows Command Injection.This issue affects ConsoleMe: before 1.4.0. Critical Thu, 16 May 2024 18:05:40 GMT https://vulnogram.org/CVE-2024-4701 https://vulnogram.org/CVE-2024-4701 A path traversal issue potentially leading to remote code execution in Genie for all versions prior to 4.3.18 Critical Fri, 10 May 2024 18:37:21 GMT https://vulnogram.org/CVE-2022-27177 https://vulnogram.org/CVE-2022-27177 A Python format string issue leading to information disclosure and potentially remote code execution in ConsoleMe for all versions prior to 1.2.2 Fri, 01 Apr 2022 22:17:04 GMT https://vulnogram.org/CVE-2021-28099 https://vulnogram.org/CVE-2021-28099 In Netflix OSS Hollow, since the Files.exists(parent) is run before creating the directories, an attacker can pre-create these directories with wide permissions. Additionally, since an insecure source of randomness is used, the file names to be creat… Tue, 23 Mar 2021 20:28:52 GMT https://vulnogram.org/CVE-2021-28100 https://vulnogram.org/CVE-2021-28100 Priam uses File.createTempFile, which gives the permissions on that file -rw-r--r--. An attacker with read access to the local filesystem can read anything written there by the Priam process. Tue, 23 Mar 2021 20:26:01 GMT https://vulnogram.org/CVE-2020-9301 https://vulnogram.org/CVE-2020-9301 Nolan Ray from Apple Information Security identified a security vulnerability in Spinnaker, all versions prior to version 1.23.4, 1.22.4 or 1.21.5. The vulnerability exists within the handling of SpEL expressions that allows an attacker to read and w… Fri, 11 Dec 2020 02:10:32 GMT https://vulnogram.org/CVE-2020-9299 https://vulnogram.org/CVE-2020-9299 There were XSS vulnerabilities discovered and reported in the Dispatch application, affecting name and description parameters of Incident Priority, Incident Type, Tag Type, and Incident Filter. This vulnerability can be exploited by an authenticated… Mon, 09 Nov 2020 14:50:18 GMT https://vulnogram.org/CVE-2020-9300 https://vulnogram.org/CVE-2020-9300 The Access Control issues include allowing a regular user to view a restricted incident, user role escalation to admin, users adding themselves as a participant in a restricted incident, and users able to view restricted incidents via the search feat… Mon, 09 Nov 2020 14:41:37 GMT https://vulnogram.org/CVE-2020-9298 https://vulnogram.org/CVE-2020-9298 The Spinnaker template resolution functionality is vulnerable to Server-Side Request Forgery (SSRF), which allows an attacker to send requests on behalf of Spinnaker potentially leading to sensitive data disclosure. Fri, 28 Aug 2020 14:45:54 GMT https://vulnogram.org/CVE-2020-9297 https://vulnogram.org/CVE-2020-9297 Netflix Titus, all versions prior to version v0.1.1-rc.274, uses Java Bean Validation (JSR 380) custom constraint validators. When building custom constraint violation error messages, different types of interpolation are supported, including Java EL… Tue, 14 Jul 2020 19:07:54 GMT https://vulnogram.org/CVE-2020-9296 https://vulnogram.org/CVE-2020-9296 Netflix Titus uses Java Bean Validation (JSR 380) custom constraint validators. When building custom constraint violation error messages, different types of interpolation are supported, including Java EL expressions. If an attacker can inject arbitra… Tue, 16 Jun 2020 13:19:56 GMT https://vulnogram.org/CVE-2019-10028 https://vulnogram.org/CVE-2019-10028 Denial of Service (DOS) in Dial Reference Source Code Used before June 18th, 2019. Fri, 21 Jun 2019 20:10:03 GMT