CVE-2020-26250

OAuthenticator is an OAuth login mechanism for JupyterHub. In oauthenticator from version 0.12.0 and before 0.12.2, the deprecated in jupyterhub 1.2 configuration Authenticator.whitelist, which should be transparently mapped to Authenticator.allowedusers with a warning, is instead ignored by...

Moderate: Red Hat Security Advisory: rh-php73-php security, bug fix, and enhancement update

An update for rh-php73-php is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

Chengdu Enable Technology Co., Ltd Vocational College Smart Campus Platform Has Logic Flaw Vulnerability

Chengdu Enable Technology Co., Ltd. is a high-tech enterprise and software enterprise in education informatization industry. A logic flaw vulnerability exists in the Vocational College Smart Campus Platform of Chengdu Enable Technology Co. An attacker can exploit the vulnerability to cause all...

fence security update

CentOS Errata and Security Advisory CESA-2020:5003 An update for fence-agents is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

CVE-2020-26548

An issue was discovered in Aviatrix Controller before R5.4.1290. There is an insecure sudo rule: a user exists that can execute all commands as any user on the system...

PT-2020-16451

Name of the Vulnerable Software and Affected Versions Aviatrix Controller versions prior to R5.4.1290 Description An issue was discovered in Aviatrix Controller where there is an insecure sudo rule, allowing a user to execute all commands as any user on the system. Recommendations For Aviatrix...

PT-2020-16353

Name of the Vulnerable Software and Affected Versions PrestaShop versions prior to 1.7.6.9 Description The issue allows an attacker to list all orders placed on a website without being logged in by exploiting a function that recreates a shopping cart from an already placed order. Recommendations...

CVE-2020-8676

Improper access control in the IntelR Visual Compute Accelerator 2, all versions, may allow a privileged user to potentially enable escalation of privilege via local access...

eclipse:rhel8 bug fix update

Eclipse is an integrated development environment IDE. The metadata for the eclipse:rhel8 module has been updated to remove the following unused profiles: c everything To check whether you have the obsolete profiles installed, run: yum module list eclipse The installed profiles have the i indicato...

PYSEC-2020-18

The previous default setting for Airflow's Experimental API was to allow all API requests without authentication, but this poses security risks to users who miss this fact. From Airflow 1.10.11 the default has been changed to deny all requests by default and is documented at...

PYSEC-2020-18

The previous default setting for Airflow's Experimental API was to allow all API requests without authentication, but this poses security risks to users who miss this fact. From Airflow 1.10.11 the default has been changed to deny all requests by default and is documented at...

org.eclipse.jetty.aggregate:jetty-all (7.1.5.v20100705), org.eclipse.jetty.aggregate:jetty-all-server (7.1.5.v20100705) +23 more potentially affected by CVE-2020-27216 via org.eclipse.jetty:jetty-webapp (7.1.5.v20100705)

org.eclipse.jetty:jetty-webapp MAVEN version 7.1.5.v20100705 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-webapp and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.1.5.v20100705 -...

org.eclipse.jetty.aggregate:jetty-all (7.5.0.rc1), org.eclipse.jetty.aggregate:jetty-all-server (7.5.0.rc1) +24 more potentially affected by CVE-2020-27216 via org.eclipse.jetty:jetty-webapp (7.5.0.rc1)

org.eclipse.jetty:jetty-webapp MAVEN version 7.5.0.rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-webapp and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.5.0.rc1 - org.eclipse.jetty.aggregate:jetty-all-server...

org.eclipse.jetty.aggregate:jetty-all (7.6.0.rc0), org.eclipse.jetty.aggregate:jetty-all-server (7.6.0.rc0) +26 more potentially affected by CVE-2020-27216 via org.eclipse.jetty:jetty-webapp (7.6.0.rc0)

org.eclipse.jetty:jetty-webapp MAVEN version 7.6.0.rc0 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-webapp and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.6.0.rc0 - org.eclipse.jetty.aggregate:jetty-all-server...

org.eclipse.jetty.aggregate:jetty-all (7.5.1.v20110908), org.eclipse.jetty.aggregate:jetty-all-server (7.5.1.v20110908) +35 more potentially affected by CVE-2020-27216 via org.eclipse.jetty:jetty-webapp (7.5.1.v20110908)

org.eclipse.jetty:jetty-webapp MAVEN version 7.5.1.v20110908 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-webapp and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.5.1.v20110908 -...

org.eclipse.jetty.aggregate:jetty-all (8.1.0.rc5), org.eclipse.jetty.aggregate:jetty-all-server (8.1.0.rc5) +23 more potentially affected by CVE-2020-27216 via org.eclipse.jetty:jetty-webapp (8.1.0.rc5)

org.eclipse.jetty:jetty-webapp MAVEN version 8.1.0.rc5 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-webapp and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 8.1.0.rc5 - org.eclipse.jetty.aggregate:jetty-all-server...

com.qualinsight.plugins.jetty:qualinsight-plugins-jetty-7.6.x (>=1.0.1, <=1.0.2), org.codehaus.cargo:cargo-jetty-7-and-onwards-deployer (>=1.4.15, <=1.6.7) +22 more potentially affected by CVE-2020-27216 via org.eclipse.jetty:jetty-webapp (7.6.17.v20150415)

org.eclipse.jetty:jetty-webapp MAVEN version 7.6.17.v20150415 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-webapp and may be impacted: - com.qualinsight.plugins.jetty:qualinsight-plugins-jetty-7.6.x =1.0.1, =1.4.15, =1.6.7 -...

org.eclipse.jetty.aggregate:jetty-all (7.6.0.rc3), org.eclipse.jetty.aggregate:jetty-all-server (7.6.0.rc3) +26 more potentially affected by CVE-2020-27216 via org.eclipse.jetty:jetty-webapp (7.6.0.rc3)

org.eclipse.jetty:jetty-webapp MAVEN version 7.6.0.rc3 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-webapp and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.6.0.rc3 - org.eclipse.jetty.aggregate:jetty-all-server...

org.eclipse.jetty.aggregate:jetty-all (7.6.20.v20160902), org.eclipse.jetty.aggregate:jetty-all-server (7.6.20.v20160902) +19 more potentially affected by CVE-2020-27216 via org.eclipse.jetty:jetty-webapp (7.6.20.v20160902)

org.eclipse.jetty:jetty-webapp MAVEN version 7.6.20.v20160902 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-webapp and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.6.20.v20160902 -...

org.eclipse.jetty.aggregate:jetty-all (7.6.0.rc5), org.eclipse.jetty.aggregate:jetty-all-server (7.6.0.rc5) +26 more potentially affected by CVE-2020-27216 via org.eclipse.jetty:jetty-webapp (7.6.0.rc5)

org.eclipse.jetty:jetty-webapp MAVEN version 7.6.0.rc5 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-webapp and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 7.6.0.rc5 - org.eclipse.jetty.aggregate:jetty-all-server...