RHCOS 4 : OpenShift Container Platform 4.6.49 (RHSA-2021:4008)

The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:4008 advisory. - coreos-installer: incorrect signature verification on gzip-compressed install images CVE-2021-20319 Note that Nessus has not tested for thi...

RHCOS 4 : OpenShift Container Platform 4.8.17 (RHSA-2021:3926)

The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:3926 advisory. - coreos-installer: incorrect signature verification on gzip-compressed install images CVE-2021-20319 Note that Nessus has not tested for thi...

RHCOS 4 : OpenShift Container Platform 4.9.4 (RHSA-2021:3934)

The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:3934 advisory. - coreos-installer: incorrect signature verification on gzip-compressed install images CVE-2021-20319 Note that Nessus has not tested for thi...

RHCOS 4 : OpenShift Container Platform 4.7.36 (RHSA-2021:3930)

The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:3930 advisory. - coreos-installer: incorrect signature verification on gzip-compressed install images CVE-2021-20319 Note that Nessus has not tested for thi...

CVE-2025-20319

In Splunk Enterprise versions below 9.4.3, 9.3.5, 9.2.7, and 9.1.10, a user who holds a role that contains the high-privilege capability editscripted and listinputs capability , could perform a remote command execution due to improper user input sanitization on the scripted input files. See Defin...

CVE-2025-20319

creationtimestamp| type| source ---|---|--- 2025-07-07 19:51:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ltfkpc2fra2y...

CVE-2025-20319

In Splunk Enterprise versions below 9.4.3, 9.3.5, 9.2.7, and 9.1.10, a user who holds a role that contains the high-privilege capability editscripted and listinputs capability , could perform a remote command execution due to improper user input sanitization on the scripted input files.See Define...

CVE-2022-20319

In DreamServices, there is a possible way to launch arbitrary protected activities due to a confused deputy. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID:...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2025-20319)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20319 advisory. - net: mana: Fix TX CQE error handling Haiyang Zhang Orabug: 36983924 CVE-2023-52532 - net: core: reject skbcopyexpand for fraglist GSO skbs Felix...

Cisco IOS XR Software SNMP Management Plane Protection ACL Bypass (cisco-sa-snmp-uhv6ZDeF)

According to its self-reported version, Cisco IOS XR is affected by a vulnerability. - A vulnerability in the UDP forwarding code of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to bypass configured management plane protection policies and access the Simple Network...

CVE-2024-20319

creationtimestamp| type| source ---|---|--- 2024-03-13 18:21:56+00:00| seen| https://t.me/ctinow/206993 2024-03-13 18:27:44+00:00| seen| https://t.me/ctinow/207009...

SUSE CVE-2018-20319

unknown...

CVE-2022-20319

creationtimestamp| type| source ---|---|--- 2022-08-12 18:39:42+00:00| seen| https://t.me/cibsecurity/48056...

CVE-2022-20319

CVE-2022-20319 affects Android 13 via DreamServices, where a confused deputy could launch arbitrary protected activities, causing local escalation of privilege. Exploitation is described as local (attack vector: LOCAL) with low privileges required and no user interaction needed, potentially eleva...

CVE-2021-20319

creationtimestamp| type| source ---|---|--- 2022-03-04 20:30:04+00:00| seen| https://t.me/cibsecurity/38442...

CVE-2021-20319

An improper signature verification vulnerability was found in coreos-installer. A specially crafted gzip installation image can bypass the image signature verification and as a consequence can lead to the installation of unsigned content. An attacker able to modify the original installation image...

CVE-2021-20319

CVE-2021-20319 affects coreos-installer. The issue is an improper signature verification for gzip-install images, allowing a modified image to bypass verification and install unsigned content. This can enable arbitrary data writes and full access to the installed node. Public references in NVD de...

Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.6.49 security update

Red Hat OpenShift Container Platform release 4.6.49 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.6. Red Hat Product Security has rated this update as having a...

Fedora: Security Advisory for rust-coreos-installer (FEDORA-2021-23fed0cab4)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

RHEL 8 : OpenShift Container Platform 4.8.17 (RHSA-2021:3926)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:3926 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud...