Lucene search
K

54 matches found

Circl
Circl
added 2026/05/19 8:32 p.m.4 views

CVE-2026-8912

creationtimestamp| type| source ---|---|--- 2026-05-19 20:32:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mmaaddplnw2s 2026-06-01 11:03:07+00:00| seen| https://bsky.app/profile/keiwork35.bsky.social/post/3mn7wlucxmo2j...

7.5CVSS5.8AI score0.00098EPSS
Exploits0References2
IBM Security Bulletins
IBM Security Bulletins
added 2023/03/31 4:44 p.m.40 views

Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a security restrictions bypass in Amazon AWS S3 Crypto SDK for GoLang (CVE-2020-8912)

Summary IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a security restrictions bypass in Amazon AWS S3 Crypto SDK for GoLang caused by a flaw in the in-band key negotiation. CVE-2020-8912. Amazon AWS S3 Crypto SDK for GoLang is included as part of the Base OS...

2.5CVSS4.7AI score0.00141EPSS
Exploits1Affected Software1
F5 Networks
F5 Networks
added 2023/02/21 6:46 p.m.67 views

K31739796: Linux kernel vulnerability CVE-2019-8912

Security Advisory Description In the Linux kernel through 4.20.11, afalgrelease in crypto/afalg.c neglects to set a NULL value for a certain structure member, which leads to a use-after-free in sockfssetattr. CVE-2019-8912 Impact There is no impact; F5 products are not affected by this...

7.8CVSS7.2AI score0.00403EPSS
Exploits0
SUSE CVE
SUSE CVE
added 2023/02/15 4:15 a.m.1 views

SUSE CVE-2019-8912

In the Linux kernel through 4.20.11, afalgrelease in crypto/afalg.c neglects to set a NULL value for a certain structure member, which leads to a use-after-free in sockfssetattr...

7.8CVSS7.5AI score0.00403EPSS
Exploits0References15
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.28 views

SUSE: Security Advisory (SUSE-SU-2019:0784-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.1CVSS7.3AI score0.07779EPSS
Exploits13References2
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.24 views

SUSE: Security Advisory (SUSE-SU-2019:0785-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.1CVSS7.4AI score0.07779EPSS
Exploits13References2
OpenVAS
OpenVAS
added 2021/04/19 12:0 a.m.30 views

SUSE: Security Advisory (SUSE-SU-2019:0767-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.1CVSS6.9AI score0.07779EPSS
Exploits13References220
OpenVAS
OpenVAS
added 2021/04/19 12:0 a.m.22 views

SUSE: Security Advisory (SUSE-SU-2019:0765-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.1CVSS8.5AI score0.9427EPSS
Exploits22References231
Wolfi
Wolfi
added 2020/08/11 8:15 p.m.31 views

CVE-2020-8912 vulnerabilities

Vulnerabilities for packages: k3d...

2.5CVSS7.5AI score0.00141EPSS
Exploits1
OSV
OSV
added 2020/08/11 8:15 p.m.2 views

CVE-2020-8912

A vulnerability in the in-band key negotiation exists in the AWS S3 Crypto SDK for GoLang versions prior to V2. An attacker with write access to the targeted bucket can change the encryption algorithm of an object in the bucket, which can then allow them to change AES-GCM to AES-CTR. Using this i...

2.5CVSS6.4AI score
Exploits0References2
CVE
CVE
added 2020/08/11 7:20 p.m.428 views

CVE-2020-8912

CVE-2020-8912 concerns the AWS S3 Crypto SDK for Go, affected in GoLang SDKs before version 2. The bug is in-band key negotiation which allows a user with write access to a bucket to alter the encryption algorithm of an object (e.g., switch from AES-GCM to AES-CTR). When combined with a decryptio...

2.5CVSS4AI score0.00141EPSS
Exploits1References2Affected Software1
OpenVAS
OpenVAS
added 2020/01/23 12:0 a.m.31 views

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2019-1538)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.3AI score0.51521EPSS
Exploits28References2
Tenable Nessus
Tenable Nessus
added 2020/01/22 12:0 a.m.74 views

RHEL 7 : kernel-alt (RHSA-2020:0174)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:0174 advisory. The kernel-alt packages provide the Linux kernel version 4.x. Security Fixes: Kernel: speculative bounds check bypass store CVE-2018-3693...

9.8CVSS7.5AI score0.02859EPSS
Exploits5References25
RedHat Linux
RedHat Linux
added 2020/01/21 3:53 p.m.137 views

Important: Red Hat Security Advisory: kernel-alt security and bug fix update

An update for kernel-alt is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...

9.8CVSS7.2AI score0.02859EPSS
Exploits5References13
OpenVAS
OpenVAS
added 2019/07/31 12:0 a.m.52 views

Fedora Update for kernel FEDORA-2019-3dbfaeac73

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.8CVSS8.4AI score0.69918EPSS
Exploits13References2
Tenable Nessus
Tenable Nessus
added 2019/05/14 12:0 a.m.32 views

EulerOS Virtualization for ARM 64 3.0.1.0 : kernel (EulerOS-SA-2019-1538)

According to the versions of the kernel packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - The kernel package contains the Linux kernel vmlinuz, the core of any Linux operating system. The kernel handles the...

9.8CVSS7.5AI score0.51521EPSS
Exploits29References21
OpenVAS
OpenVAS
added 2019/05/07 12:0 a.m.84 views

Fedora Update for kernel FEDORA-2019-94dc902948

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

8.1CVSS7.3AI score0.07779EPSS
Exploits7References2
Tenable Nessus
Tenable Nessus
added 2019/04/15 12:0 a.m.49 views

openSUSE Security Update : the Linux Kernel (openSUSE-2019-1193)

The openSUSE Leap 15.0 was updated to receive various security and bugfixes. The following security bugs were fixed : - CVE-2019-2024: A use-after-free when disconnecting a source was fixed which could lead to crashes. bnc1129179. - CVE-2019-3819: A flaw was found in the Linux kernel in the...

7.8CVSS6.7AI score0.06933EPSS
Exploits6References183
OpenVAS
OpenVAS
added 2019/04/13 12:0 a.m.56 views

openSUSE: Security Advisory for the Linux Kernel (openSUSE-SU-2019:1193-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.8CVSS7.3AI score0.06933EPSS
Exploits6References2
Cloud Foundry
Cloud Foundry
added 2019/04/12 12:0 a.m.324 views

USN-3931-2: Linux kernel (HWE) vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 16.04 Description USN-3931-1 fixed vulnerabilities in the Linux kernel for Ubuntu 18.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement HWE kernel from Ubuntu 18.04 LTS for Ubuntu 16.0...

8.1CVSS8.4AI score0.07779EPSS
Exploits12
Rows per page
Query Builder