CVE-2020-8554 affecting package python-kubernetes for versions less than 21.7.0-1

CVE-2020-8554 affecting package python-kubernetes for versions less than 21.7.0-1. A patched version of the package is available...

CVE-2024-51362

The LSC Smart Connect Indoor IP Camera V7.6.32 is vulnerable to an information disclosure issue where live camera footage can be accessed through the RTSP protocol on port 8554 without requiring authentication. This allows unauthorized users with network access to view the camera's feed,...

PT-2024-34606 · Lsc · Lsc Smart Connect Indoor Ip Camera

Name of the Vulnerable Software and Affected Versions: LSC Smart Connect Indoor IP Camera version 7.6.32 Description: The issue allows unauthorized access to live camera footage through the RTSP protocol on port 8554 without requiring authentication, potentially compromising user privacy and...

CVE-2024-51362

The CVE-2024-51362 entry affects LSC Smart Connect Indoor IP Camera V7.6.32. The Red Hat NVD references and other sources confirm an information-disclosure flaw where live footage can be accessed via RTSP on port 8554 without authentication, enabling unauthorized network access to the camera feed...

CVE-2024-8554

creationtimestamp| type| source ---|---|--- 2024-09-07 16:50:07+00:00| seen| https://t.me/cvedetector/5022...

CVE-2024-8554 SourceCodester Clinics Patient Management System users.php cross site scripting

A vulnerability was found in SourceCodester Clinics Patient Management System 2.0 and classified as problematic. This issue affects some unknown processing of the file /users.php. The manipulation of the argument message leads to cross site scripting. The attack may be initiated remotely. The...

CVE-2024-8554 SourceCodester Clinics Patient Management System users.php cross site scripting

A vulnerability was found in SourceCodester Clinics Patient Management System 2.0 and classified as problematic. This issue affects some unknown processing of the file /users.php. The manipulation of the argument message leads to cross site scripting. The attack may be initiated remotely. The...

CVE-2020-8554 affecting package kubernetes for versions less than 1.28.3-2

CVE-2020-8554 affecting package kubernetes for versions less than 1.28.3-2. A patched version of the package is available...

CBL Mariner 2.0 Security Update: kubernetes (CVE-2020-8554)

The version of kubernetes installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2020-8554 advisory. - Kubernetes API server in all versions allow an attacker who is able to create a ClusterIP service and set...

CVE-2020-8554 affecting package kubernetes for versions less than 1.28.3-1

CVE-2020-8554 affecting package kubernetes for versions less than 1.28.3-1. A patched version of the package is available...

Rocky Linux 8 : firefox (RLSA-2022:8554)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:8554 advisory. - Service Workers should not be able to infer information about opaque cross-origin responses; but timing information for cross-origin media combined wi...

Oracle Linux 8 : firefox (ELSA-2022-8554)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2022-8554 advisory. 102.5.0-1.0.1 - Updated homepages to use https Orabug: 34648274 - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the...

RHEL 8 : firefox (RHSA-2022:8554)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:8554 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...

CVE-2020-8554 affecting package kubernetes 1.22.6-4

CVE-2020-8554 affecting package kubernetes 1.22.6-4. A patched version of the package is available...

Security Bulletin: IBM Cloud Private is vulnerable to Kubernetes vulnerabilities (CVE-2020-8554)

Summary IBM Cloud Private is vulnerable to Kubernetes vulnerabilities Vulnerability Details CVEID: CVE-2020-8554 DESCRIPTION: Kubernetes could allow a remote authenticated attacker to bypass security restrictions, caused by a flaw when using LoadBalancer or ExternalIPs. By using man-in-the-middle...

Security Bulletin: IBM Cloud Kubernetes Service is affected by a Kubernetes security vulnerability (CVE-2020-8554)

Summary IBM Cloud Kubernetes Service is affected by a Kubernetes security vulnerability that could allow a malicious user to intercept traffic from other pods or nodes in the cluster CVE-2020-8554 Vulnerability Details CVEID: CVE-2020-8554 Description: Kubernetes could allow a remote authenticate...

Security Bulletin: Red Hat OpenShift on IBM Cloud is affected by a Kubernetes security vulnerability (CVE-2020-8554)

Summary Red Hat OpenShift on IBM Cloud is affected by a Kubernetes security vulnerability that could allow a malicious user to intercept traffic from other pods or nodes in the cluster CVE-2020-8554 Vulnerability Details CVEID: CVE-2020-8554 Description: Kubernetes could allow a remote...

Oracle Linux 7 / 8 : olcne (ELSA-2021-9028)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9028 advisory. - Kata CVE-2020-28914 kata-proxy - Address CVE-2020-28914: An improper file permissions vulnerability affects Kata Containers prior to 1.11.5 -...

Oracle Linux 7 : olcne (ELSA-2021-9029)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9029 advisory. - Address CVE-2020-28914 kata - Address CVE-2020-28914 kubernetes - Kata CVE-2020-28914 olcne - Address CVE-2020-28914: An improper file permissions...

AZL-35135 CVE-2020-8554 affecting package python-kubernetes for versions less than 21.7.0-1

Kubernetes API server in all versions allow an attacker who is able to create a ClusterIP service and set the spec.externalIPs field, to intercept traffic to that IP address. Additionally, an attacker who is able to patch the status which is considered a privileged operation and should not...