Lucene search
K

630 matches found

UbuntuCve
UbuntuCve
added 2020/12/31 12:0 a.m.28 views

CVE-2020-36331

A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function ChunkAssignData. The highest threat from this vulnerability is to data confidentiality and to the service availability...

9.1CVSS7.1AI score0.02302EPSS
Exploits0References3
OSV
OSV
added 2020/12/31 12:0 a.m.1 views

UBUNTU-CVE-2020-36331

A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function ChunkAssignData. The highest threat from this vulnerability is to data confidentiality and to the service availability...

9.1CVSS7.2AI score0.02302EPSS
Exploits0References4
OSV
OSV
added 2020/12/31 12:0 a.m.2 views

UBUNTU-CVE-2020-36332

A flaw was found in libwebp in versions before 1.0.1. When reading a file libwebp allocates an excessive amount of memory. The highest threat from this vulnerability is to the service availability...

7.5CVSS7.1AI score0.01966EPSS
Exploits0References3
RedHat Linux
RedHat Linux
added 2020/12/21 10:11 a.m.2 views

postgresql: Reconnection can downgrade connection security settings

A flaw was found in postgresql. If a client application that creates additional database connections only reuses the basic connection parameters while dropping security-relevant parameters, an opportunity for a man-in-the-middle attack, or the ability to observe clear-text transmissions, could...

8.1CVSS7.1AI score0.01574EPSS
Exploits0References5
CNVD
CNVD
added 2020/11/11 12:0 a.m.2 views

SAP Solution Manager Missing Authentication Check Vulnerability (CNVD-2020-62928)

SAP Solution Manager is a set of system monitoring, SAP support desktop, self-service, ASAP implementation and other functions of the German SAP company as one of the system management platform. The platform can help customers establish SAP solution lifecycle management, and provide system...

10CVSS6.9AI score0.0134EPSS
Exploits0References1
Cvelist
Cvelist
added 2020/11/10 4:17 p.m.9 views

CVE-2020-26823

SAP Solution Manager JAVA stack, version - 7.20, allows an unauthenticated attacker to compromise the system because of missing authorization checks in the Upgrade Diagnostics Agent Connection Service, this has an impact to the integrity and availability of the service...

10CVSS9.5AI score0.01284EPSS
Exploits0References2
NVD
NVD
added 2020/10/05 1:15 p.m.28 views

CVE-2020-25636

A flaw was found in Ansible Base when using the awsssm connection plugin as there is no namespace separation for file transfers. Files are written directly to the root bucket, making possible to have collisions when running multiple ansible processes. This issue affects mainly the service...

7.1CVSS0.00294EPSS
Exploits0References2
OSV
OSV
added 2020/10/05 1:15 p.m.24 views

CVE-2020-25636

A flaw was found in Ansible Base when using the awsssm connection plugin as there is no namespace separation for file transfers. Files are written directly to the root bucket, making possible to have collisions when running multiple ansible processes. This issue affects mainly the service...

7.1CVSS6.7AI score0.00294EPSS
Exploits0References2
UbuntuCve
UbuntuCve
added 2020/10/05 1:15 p.m.28 views

CVE-2020-25636

A flaw was found in Ansible Base when using the awsssm connection plugin as there is no namespace separation for file transfers. Files are written directly to the root bucket, making possible to have collisions when running multiple ansible processes. This issue affects mainly the service...

7.1CVSS7AI score0.00294EPSS
Exploits0References2
Prion
Prion
added 2020/10/05 1:15 p.m.16 views

Design/Logic Flaw

A flaw was found in Ansible Base when using the awsssm connection plugin as there is no namespace separation for file transfers. Files are written directly to the root bucket, making possible to have collisions when running multiple ansible processes. This issue affects mainly the service...

3.6CVSS6.8AI score0.00294EPSS
Exploits0References2Affected Software1
PyPA
PyPA
added 2020/10/05 1:15 p.m.5 views

PYSEC-2020-221

A flaw was found in Ansible Base when using the awsssm connection plugin as there is no namespace separation for file transfers. Files are written directly to the root bucket, making possible to have collisions when running multiple ansible processes. This issue affects mainly the service...

7.1CVSS6.7AI score0.00294EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2020/10/05 1:15 p.m.22 views

PYSEC-2020-221

A flaw was found in Ansible Base when using the awsssm connection plugin as there is no namespace separation for file transfers. Files are written directly to the root bucket, making possible to have collisions when running multiple ansible processes. This issue affects mainly the service...

7.1CVSS5.8AI score0.00294EPSS
Exploits0References2
CVE
CVE
added 2020/10/05 12:51 p.m.79 views

CVE-2020-25636

CVE-2020-25636 : A flaw in Ansible Base when using the aws_ssm connection plugin lacks namespace separation for file transfers, causing files to be written directly to the root bucket and potentially colliding across multiple ansible processes. The impact, as described in the sources, is mainly o...

7.1CVSS6.7AI score0.00294EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2020/10/05 12:51 p.m.39 views

CVE-2020-25636

A flaw was found in Ansible Base when using the awsssm connection plugin as there is no namespace separation for file transfers. Files are written directly to the root bucket, making possible to have collisions when running multiple ansible processes. This issue affects mainly the service...

6.6CVSS6.8AI score0.00294EPSS
Exploits0References2
Debian CVE
Debian CVE
added 2020/10/05 12:51 p.m.23 views

CVE-2020-25636

A flaw was found in Ansible Base when using the awsssm connection plugin as there is no namespace separation for file transfers. Files are written directly to the root bucket, making possible to have collisions when running multiple ansible processes. This issue affects mainly the service...

7.1CVSS7AI score0.00294EPSS
Exploits0
FreeBSD
FreeBSD
added 2020/10/05 12:0 a.m.25 views

py-ansible -- multiple vulnerabilities

abeluck reports: A flaw was found in Ansible Base when using the awsssm connection plugin as garbage collector is not happening after playbook run is completed. Files would remain in the bucket exposing the data. This issue affects directly data confidentiality. A flaw was found in Ansible Base...

5.5CVSS6.1AI score0.00315EPSS
Exploits0References2
OSV
OSV
added 2020/09/16 2:15 p.m.22 views

CVE-2020-14393

A buffer overflow was found in perl-DBI 1.643 in DBI.xs. A local attacker who is able to supply a string longer than 300 characters could cause an out-of-bounds write, affecting the availability of the service or integrity of data...

7.1CVSS5.1AI score
Exploits0References6
OSV
OSV
added 2020/09/16 2:15 p.m.3 views

DEBIAN-CVE-2020-14393

A buffer overflow was found in perl-DBI 1.643 in DBI.xs. A local attacker who is able to supply a string longer than 300 characters could cause an out-of-bounds write, affecting the availability of the service or integrity of data...

7.1CVSS7.4AI score0.00602EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2020/09/16 2:15 p.m.19 views

CVE-2020-14393

A buffer overflow was found in perl-DBI 1.643 in DBI.xs. A local attacker who is able to supply a string longer than 300 characters could cause an out-of-bounds write, affecting the availability of the service or integrity of data...

7.1CVSS7.2AI score0.00602EPSS
Exploits0References4
AlpineLinux
AlpineLinux
added 2020/09/16 1:27 p.m.21 views

CVE-2020-14393

A buffer overflow was found in perl-DBI 1.643 in DBI.xs. A local attacker who is able to supply a string longer than 300 characters could cause an out-of-bounds write, affecting the availability of the service or integrity of data...

7.1CVSS7AI score0.00602EPSS
Exploits0
Rows per page
Query Builder