Lucene search
+L

5929 matches found

Github Security Blog
Github Security Blog
•added 2021/05/06 5:28 p.m.•52 views

Prototype Pollution in madlib-object-utils

madlib-object-utils before 0.1.7 is vulnerable to Prototype Pollution via setValue...

9.8CVSS8.5AI score0.02055EPSS
SaveExploits1References4Affected Software1
OSV
OSV
•added 2021/05/06 5:28 p.m.•70 views

GHSA-JVF5-Q4H5-2JMJ Prototype Pollution in madlib-object-utils

madlib-object-utils before 0.1.7 is vulnerable to Prototype Pollution via setValue...

9.8CVSS8.4AI score0.02055EPSS
SaveExploits1References3
OpenVAS
OpenVAS
•added 2021/05/03 12:00 a.m.•16 views

Huawei EulerOS: Security Advisory for xdg-utils (EulerOS-SA-2021-1861)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.8AI score0.02454EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2021/05/03 12:00 a.m.•31 views

SUSE SLES15 Security Update : cifs-utils (SUSE-SU-2021:1455-1)

This update for cifs-utils fixes the following security issues : CVE-2021-20208: Fixed a potential kerberos auth leak escaping from container. bsc1183239 CVE-2020-14342: Fixed a shell command injection vulnerability in mount.cifs. bsc1174477 This update for cifs-utils fixes the following issues :...

7CVSS6.2AI score0.00666EPSS
SaveExploits1References9
OPENSUSE Linux
OPENSUSE Linux
•added 2021/05/01 12:00 a.m.•85 views

Security update for cifs-utils (important)

openSUSE Security Update: Security update for cifs-utils Announcement ID: openSUSE-SU-2021:0639-1 Rating: important References: 1152930 1174477 1183239 1184815 Cross-References: CVE-2020-14342 CVE-2021-20208 CVSS scores: CVE-2020-14342 NVD : 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H...

6.1CVSS6.2AI score0.00666EPSS
SaveExploits1References4
OpenVAS
OpenVAS
•added 2021/05/01 12:00 a.m.•29 views

openSUSE: Security Advisory for cifs-utils (openSUSE-SU-2021:0639-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7CVSS6.5AI score0.00666EPSS
SaveExploits1References2
OSV
OSV
•added 2021/04/30 7:23 p.m.•13 views

OPENSUSE-SU-2021:0639-1 Security update for cifs-utils

This update for cifs-utils fixes the following security issues: - CVE-2021-20208: Fixed a potential kerberos auth leak escaping from container. bsc1183239 - CVE-2020-14342: Fixed a shell command injection vulnerability in mount.cifs. bsc1174477 This update for cifs-utils fixes the following issue...

7CVSS6.2AI score0.00666EPSS
SaveExploits1References7
OSV
OSV
•added 2021/04/30 9:58 a.m.•11 views

SUSE-SU-2021:1455-1 Security update for cifs-utils

This update for cifs-utils fixes the following security issues: - CVE-2021-20208: Fixed a potential kerberos auth leak escaping from container. bsc1183239 - CVE-2020-14342: Fixed a shell command injection vulnerability in mount.cifs. bsc1174477 This update for cifs-utils fixes the following issue...

7CVSS6.2AI score0.00666EPSS
SaveExploits1References7
Tenable Nessus
Tenable Nessus
•added 2021/04/30 12:00 a.m.•33 views

EulerOS 2.0 SP3 : xdg-utils (EulerOS-SA-2021-1861)

According to the version of the xdg-utils package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The openenvvar function in xdg-open in xdg-utils before 1.1.3 does not validate strings before launching the program specified by the BROWSER...

8.8CVSS6.8AI score0.02454EPSS
SaveExploits0References2
OSV
OSV
•added 2021/04/19 10:15 p.m.•31 views

CVE-2021-20208

A flaw was found in cifs-utils in versions before 6.13. A user when mounting a krb5 CIFS file system from within a container can use Kerberos credentials of the host. The highest threat from this vulnerability is to data confidentiality and integrity...

6.1CVSS3.8AI score
SaveExploits0References5
NVD
NVD
•added 2021/04/19 10:15 p.m.•27 views

CVE-2021-20208

A flaw was found in cifs-utils in versions before 6.13. A user when mounting a krb5 CIFS file system from within a container can use Kerberos credentials of the host. The highest threat from this vulnerability is to data confidentiality and integrity...

6.1CVSS0.00666EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
•added 2021/04/19 10:15 p.m.•37 views

CVE-2021-20208

A flaw was found in cifs-utils in versions before 6.13. A user when mounting a krb5 CIFS file system from within a container can use Kerberos credentials of the host. The highest threat from this vulnerability is to data confidentiality and integrity...

6.1CVSS6.6AI score0.00666EPSS
SaveExploits0References4
Prion
Prion
•added 2021/04/19 10:15 p.m.•27 views

Design/Logic Flaw

A flaw was found in cifs-utils in versions before 6.13. A user when mounting a krb5 CIFS file system from within a container can use Kerberos credentials of the host. The highest threat from this vulnerability is to data confidentiality and integrity...

4.9CVSS6AI score0.00666EPSS
SaveExploits0References5Affected Software3
OSV
OSV
•added 2021/04/19 10:15 p.m.•16 views

UBUNTU-CVE-2021-20208

A flaw was found in cifs-utils in versions before 6.13. A user when mounting a krb5 CIFS file system from within a container can use Kerberos credentials of the host. The highest threat from this vulnerability is to data confidentiality and integrity...

6.1CVSS6.7AI score0.00666EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2021/04/19 9:12 p.m.•63 views

CVE-2021-20208

A flaw was found in cifs-utils in versions before 6.13. A user when mounting a krb5 CIFS file system from within a container can use Kerberos credentials of the host. The highest threat from this vulnerability is to data confidentiality and integrity...

6.5AI score0.00666EPSS
SaveExploits0References5
Mend
Mend
•added 2021/04/19 9:12 p.m.•4 views

CVE-2021-20208

A flaw was found in cifs-utils in versions before 6.13. A user when mounting a krb5 CIFS file system from within a container can use Kerberos credentials of the host. The highest threat from this vulnerability is to data confidentiality and integrity...

6.1CVSS0.00666EPSS
SaveExploits0References12
CVE
CVE
•added 2021/04/19 9:12 p.m.•295 views

CVE-2021-20208

CVE-2021-20208 affects the cifs-utils package prior to 6.13. When mounting a Kerberos-authenticated CIFS file system from inside a container, a user can reuse the host’s Kerberos credentials, risking data confidentiality and integrity. Affected: cifs-utils (versions

6.1CVSS6.1AI score0.00666EPSS
SaveExploits0References5Affected Software1
AlpineLinux
AlpineLinux
•added 2021/04/19 9:12 p.m.•89 views

CVE-2021-20208

A flaw was found in cifs-utils in versions before 6.13. A user when mounting a krb5 CIFS file system from within a container can use Kerberos credentials of the host. The highest threat from this vulnerability is to data confidentiality and integrity...

6.1CVSS6.4AI score0.00666EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2021/04/19 9:12 p.m.•75 views

CVE-2021-20208

A flaw was found in cifs-utils in versions before 6.13. A user when mounting a krb5 CIFS file system from within a container can use Kerberos credentials of the host. The highest threat from this vulnerability is to data confidentiality and integrity...

6.1CVSS6.4AI score0.00666EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2021/04/19 11:50 a.m.•33 views

CVE-2021-20208

A flaw was found in cifs-utils. A user when mounting a krb5 CIFS file system from within a container can use Kerberos credentials of the host. The highest threat from this vulnerability is to data confidentiality and integrity. Mitigation DFS and multiuser mounts can be disabled in the container...

6.1CVSS6.4AI score0.00666EPSS
SaveExploits0References4
Rows per page
Query Builder