Lucene search
+L

5455 matches found

RedHat Linux
RedHat Linux
added 2021/08/12 1:53 a.m.316 views

Moderate: Red Hat Security Advisory: ACS 3.64 security and enhancement update

Updated images are now available for Red Hat Advanced Cluster Security for Kubernetes RHACS. Red Hat Product Security has rated this update as having a "Moderate" security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

7.5CVSS6.8AI score0.06975EPSS
SaveExploits4References6
Tenable Nessus
Tenable Nessus
added 2021/08/12 12:00 a.m.22 views

Oracle Linux 8 : cloud-init (ELSA-2021-3081)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2021-3081 advisory. - Resolves: bz1979252 CVE-2021-3429 cloud-init: randomly generated passwords logged in clear-text to world-readable file rhel-8 rhel-8.4.0.z Tenable has extract...

5.5CVSS5.7AI score0.00219EPSS
SaveExploits0References2
Oracle linux
Oracle linux
added 2021/08/12 12:00 a.m.65 views

cloud-init security update

20.3-10.0.1 - Added missing services in rhel/systemd/cloud-init.service Orabug: 32183938 - Added missing services in cloud-init.service.tmpl for sshd Orabug: 32183938 - Forward port applicable cloud-init 18.4-2.0.3 changes to cloud-init-18-5 Orabug: 30435672 - limit permissions Orabug: 31352433 -...

0.7AI score0.00219EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2021/08/11 12:00 a.m.33 views

RHEL 8 : cloud-init (RHSA-2021:3081)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2021:3081 advisory. The cloud-init packages provide a set of init scripts for cloud instances. Cloud instances need special scripts to run during initialization to...

5.5CVSS5.8AI score0.00219EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2021/08/10 4:34 p.m.37 views

Moderate: Red Hat Security Advisory: cloud-init security update

An update for cloud-init is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

5.5CVSS6.1AI score0.00219EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2021/08/10 4:34 p.m.10 views

cloud-init: randomly generated passwords logged in clear-text to world-readable file

A flaw was found in cloud-init. When a system is configured through cloud-init and the "Set Passwords" module is used with "chpasswd" directive and "RANDOM", the randomly generated password for the relative user is written in clear-text in a file readable by any existing user of the system. The...

5.5CVSS5.7AI score0.00219EPSS
SaveExploits0References4
AlmaLinux
AlmaLinux
added 2021/08/10 12:01 p.m.35 views

Moderate: cloud-init security update

The cloud-init packages provide a set of init scripts for cloud instances. Cloud instances need special scripts to run during initialization to retrieve and install SSH keys, and to let the user run various scripts. Security Fixes: cloud-init: randomly generated passwords logged in clear-text to...

1.4AI score0.00219EPSS
SaveExploits0References1
OSV
OSV
added 2021/08/10 12:01 p.m.23 views

RLSA-2021:3081 Moderate: cloud-init security update

The cloud-init packages provide a set of init scripts for cloud instances. Cloud instances need special scripts to run during initialization to retrieve and install SSH keys, and to let the user run various scripts. Security Fixes: cloud-init: randomly generated passwords logged in clear-text to...

5.5CVSS5.4AI score0.00219EPSS
SaveExploits0References2
Rockylinux
Rockylinux
added 2021/08/10 12:01 p.m.37 views

cloud-init security update

An update is available for cloud-init. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The cloud-init packages provide a set of init scripts for cloud instances...

5.5CVSS5.6AI score0.00219EPSS
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2021/08/04 9:15 p.m.7 views

CVE-2021-38114

libavcodec/dnxhddec.c in FFmpeg 4.4 does not check the return value of the initvlc function, a similar issue to CVE-2013-0868...

5.5CVSS6.7AI score0.01031EPSS
SaveExploits0References7
UbuntuCve
UbuntuCve
added 2021/08/04 9:15 p.m.32 views

CVE-2021-38114

libavcodec/dnxhddec.c in FFmpeg 4.4 does not check the return value of the initvlc function, a similar issue to CVE-2013-0868...

5.5CVSS6.8AI score0.01031EPSS
SaveExploits0References5
OSV
OSV
added 2021/08/04 9:15 p.m.11 views

UBUNTU-CVE-2021-38114

libavcodec/dnxhddec.c in FFmpeg 4.4 does not check the return value of the initvlc function, a similar issue to CVE-2013-0868...

5.5CVSS6.7AI score0.01031EPSS
SaveExploits0References6
OpenVAS
OpenVAS
added 2021/08/03 12:00 a.m.31 views

openSUSE: Security Advisory for qemu (openSUSE-SU-2021:2591-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

6.5CVSS6.8AI score0.00638EPSS
SaveExploits3References2
OSV
OSV
added 2021/07/30 2:15 p.m.6 views

CVE-2020-19118

Cross Site Scripting XSS vulnerabiity in YzmCMS 5.2 via the sitecode parameter in admin/index/init.html...

5.4CVSS6.1AI score0.00524EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2021/07/30 12:00 a.m.11 views

Yzmcms 跨站脚本漏洞

YzmCMS is a lightweight open source content management system based on PHP Mysql architecture developed by Yuan Zhimeng alone.YzmCMS version 5.2 has a cross-site scripting vulnerability. An attacker can use the sitecode parameter in admin/index/init.html to inject and execute javascript code...

5.4CVSS5.4AI score0.00524EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2021/07/28 12:00 a.m.26 views

openSUSE: Security Advisory for qemu (openSUSE-SU-2021:2474-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

6.5CVSS6.5AI score0.00491EPSS
SaveExploits2References2
OpenVAS
OpenVAS
added 2021/07/28 12:00 a.m.35 views

SUSE: Security Advisory (SUSE-SU-2021:2474-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.2AI score0.00491EPSS
SaveExploits2References2
OPENSUSE Linux
OPENSUSE Linux
added 2021/07/27 12:00 a.m.104 views

Security update for qemu (important)

openSUSE Security Update: Security update for qemu Announcement ID: openSUSE-SU-2021:2474-1 Rating: important References: 1187364 1187365 1187366 1187367 1187499 1187529 1187538 1187539 Cross-References: CVE-2021-3582 CVE-2021-3592 CVE-2021-3593 CVE-2021-3594 CVE-2021-3595 CVE-2021-3607...

5CVSS7.2AI score0.00491EPSS
SaveExploits2References8
OPENSUSE Linux
OPENSUSE Linux
added 2021/07/21 12:00 a.m.85 views

Security update for qemu (important)

openSUSE Security Update: Security update for qemu Announcement ID: openSUSE-SU-2021:2442-1 Rating: important References: 1187499 1187529 1187538 1187539 Cross-References: CVE-2021-3582 CVE-2021-3607 CVE-2021-3608 CVE-2021-3611 CVSS scores: CVE-2021-3582 SUSE: 3.2...

5CVSS7.5AI score0.00491EPSS
SaveExploits2References4
Microsoft CVE
Microsoft CVE
added 2021/07/16 12:00 a.m.11 views

Libcontainer and Docker Engine before 1.6.1 opens the file-descriptor passed to the pid-1 process before performing the chroot which allows local users to gain privileges via a symlink attack in an image.

...

7.2CVSS7AI score0.00609EPSS
SaveExploits0
Rows per page
Query Builder