Lucene search
+L

3015 matches found

Tenable Nessus
Tenable Nessus
added 2020/07/08 12:00 a.m.30 views

FreeBSD : Gitlab -- Multiple Vulnerabilities (f7a97d43-c039-11ea-a051-001b217b3468)

Gitlab reports : Workhorse bypass allows files in /tmp to be read via Maven Repository APIs C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2020 Jacques Vidrine and contributors Redistribution...

5.3CVSS5.7AI score0.01059EPSS
SaveExploits0References3
CNVD
CNVD
added 2020/07/08 12:00 a.m.16 views

Unspecified Vulnerability in GitLab EE

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A security vulnerability exists in GitLab Enterprise...

5.3CVSS6.3AI score0.01059EPSS
SaveExploits0References1
FreeBSD
FreeBSD
added 2020/07/06 12:00 a.m.34 views

Gitlab -- Multiple Vulnerabilities

Gitlab reports: Workhorse bypass allows files in /tmp to be read via Maven Repository APIs...

5.3CVSS3.9AI score0.01059EPSS
SaveExploits0References1
Veeam
Veeam
added 2020/07/03 12:00 a.m.21 views

Veeam Service Provider Console v4 Patch 1 (build 4911)

Challenge Veeam Service Provider Console v4 Patch 1. This patch is superseded by the Patch 2 Cause Please confirm you are running version 4.0.0.4877 before installing this Patch 1. You can check this under Windows Programs and features. After upgrading, your build will be version 4.0.0.4911. As a...

6.6AI score
SaveExploits0Affected Software1
Veracode
Veracode
added 2020/07/02 4:34 a.m.14 views

Privilege Escalation

Presto is vulnerable to privilege escalation. During the Presto server installations with secure internal communication configured, having a direct access to internal APIs allows an authenticated user to bypass the authorization checks...

8.8CVSS4.6AI score0.01058EPSS
SaveExploits0References5Affected Software1
Wallarm Lab
Wallarm Lab
added 2020/07/01 10:07 p.m.41 views

How To Protect Your Kubernetes Cluster with Wallarm – part 1 of 3

Kubernetes clusters enable an organization to easily take advantage of containerization. While this is a huge asset, it also creates security issues. Many organizations lack visibility into the applications within their Kubernetes cluster and their attack surface. Within a Kubernetes cluster, an...

2.8AI score
SaveExploits0
NVD
NVD
added 2020/06/30 5:15 p.m.22 views

CVE-2020-15087

In Presto before version 337, authenticated users can bypass authorization checks by directly accessing internal APIs. This impacts Presto server installations with secure internal communication configured. This does not affect installations that have not configured secure internal communication,...

8.8CVSS0.01058EPSS
SaveExploits0References2
OSV
OSV
added 2020/06/30 5:15 p.m.14 views

CVE-2020-15087

In Presto before version 337, authenticated users can bypass authorization checks by directly accessing internal APIs. This impacts Presto server installations with secure internal communication configured. This does not affect installations that have not configured secure internal communication,...

8.8CVSS8.7AI score
SaveExploits0References2
Prion
Prion
added 2020/06/30 5:15 p.m.16 views

Authorization

In Presto before version 337, authenticated users can bypass authorization checks by directly accessing internal APIs. This impacts Presto server installations with secure internal communication configured. This does not affect installations that have not configured secure internal communication,...

6.5CVSS8.6AI score0.01058EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2020/06/30 5:15 p.m.5 views

CVE-2020-15087

In Presto before version 337, authenticated users can bypass authorization checks by directly accessing internal APIs. This impacts Presto server installations with secure internal communication configured. This does not affect installations that have not configured secure internal communication,...

8.8CVSS7.9AI score0.01058EPSS
SaveExploits0References4Affected Software1
CVE
CVE
added 2020/06/30 4:35 p.m.144 views

CVE-2020-15087

CVE-2020-15087 affects Presto server installations with secure internal communication configured. Authenticated users can bypass authorization checks by directly accessing internal APIs in Presto prior to version 337. The issue does not apply to installations lacking secure internal communication...

8.8CVSS8AI score0.01058EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2020/06/30 4:35 p.m.34 views

CVE-2020-15087 Privilege escalation in Presto

In Presto before version 337, authenticated users can bypass authorization checks by directly accessing internal APIs. This impacts Presto server installations with secure internal communication configured. This does not affect installations that have not configured secure internal communication,...

7.4CVSS8.7AI score0.01058EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
added 2020/06/30 4:33 p.m.38 views

Privilege escalation in Presto

Affected This affects Presto server installations. This does NOT affect clients such as the CLI or JDBC driver. Impact Authenticated users can bypass authorization checks by directly accessing internal APIs. This impacts Presto server installations with secure internal communication configured...

8.8CVSS3.3AI score0.01058EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2020/06/30 4:33 p.m.50 views

GHSA-F6PC-CRHH-CP96 Privilege escalation in Presto

Affected This affects Presto server installations. This does NOT affect clients such as the CLI or JDBC driver. Impact Authenticated users can bypass authorization checks by directly accessing internal APIs. This impacts Presto server installations with secure internal communication configured...

7.4CVSS8.8AI score0.01058EPSS
SaveExploits0References5
OSV
OSV
added 2020/06/30 1:38 p.m.42 views

ALSA-2020:2774 Important: virt:rhel security update

Kernel-based Virtual Machine KVM offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the...

6.8CVSS5.9AI score0.02486EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2020/06/30 12:00 a.m.10 views

PT-2020-14175 · Presto · Presto

Name of the Vulnerable Software and Affected Versions: Presto versions prior to 337 Description: Authenticated users can bypass authorization checks by directly accessing internal APIs. This issue impacts Presto server installations with secure internal communication configured. It does not affec...

8.8CVSS8.6AI score0.01058EPSS
SaveExploits0References7
OSV
OSV
added 2020/06/25 12:15 a.m.13 views

CVE-2020-5963

NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the Inter Process Communication APIs, in which improper access control may lead to code execution, denial of service, or information disclosure...

7.8CVSS6.7AI score
SaveExploits0References3
NVD
NVD
added 2020/06/25 12:15 a.m.26 views

CVE-2020-5963

NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the Inter Process Communication APIs, in which improper access control may lead to code execution, denial of service, or information disclosure...

7.8CVSS0.00471EPSS
SaveExploits0References3
Prion
Prion
added 2020/06/25 12:15 a.m.19 views

Improper access control

NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the Inter Process Communication APIs, in which improper access control may lead to code execution, denial of service, or information disclosure...

4.6CVSS7.3AI score0.00471EPSS
SaveExploits0References3Affected Software5
ATTACKERKB
ATTACKERKB
added 2020/06/25 12:15 a.m.4 views

CVE-2020-5963

NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the Inter Process Communication APIs, in which improper access control may lead to code execution, denial of service, or information disclosure...

7.8CVSS7.4AI score0.00471EPSS
SaveExploits0References6
Rows per page
Query Builder