Lucene search
+L

8822 matches found

CNVD
CNVD
added 2020/03/24 12:00 a.m.12 views

Red Hat JBoss Application Server Information Disclosure Vulnerability

Red Hat JBoss Application Server is a U.S. Red Hat Red Hat company based on Java EE open source application server. The product has a startup ultra-fast , lightweight , modular design , hot and parallel deployment , simple management , domain management and the first class components and other...

7.5CVSS6.1AI score0.01105EPSS
SaveExploits0References1
Kubernetes Security Advisories
Kubernetes Security Advisories
added 2020/03/23 6:35 p.m.11 views

apiserver DoS (oom)

CVSS Rating: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Medium The Kubernetes API server has been found to be vulnerable to a denial of service attack via authorized API requests. Am I vulnerable? If an attacker that can make an authorized resource request to an unpatched API server see below,...

5.3CVSS6.2AI score0.02428EPSS
SaveExploits0Affected Software1
The Hacker News
The Hacker News
added 2020/03/23 9:10 a.m.62 views

User Survey 2020 Report Shows Rapid Growth In Apache Pulsar Adoption

For the first time ever, the Apache Pulsar PMC team is publishing a user survey report. The 2020 Apache Pulsar User Survey Report reveals Pulsar's accelerating rate of global adoption, details how organizations are leveraging Pulsar to build real-time streaming applications, and highlights key...

7AI score
SaveExploits0
CNVD
CNVD
added 2020/03/23 12:00 a.m.11 views

Unspecified Vulnerability in LINBIT csync2

LINBIT csync2 is a cluster synchronization tool from the Austrian company LINBIT, which is mainly used to keep files on multiple hosts in a cluster synchronized. A security vulnerability exists in the ''csyncdaemonsession''function in the daemon.c file in LINBIT csync2 2.0 and earlier versions,...

9.8CVSS5AI score0.01901EPSS
SaveExploits0References1
NVD
NVD
added 2020/03/18 4:15 p.m.44 views

CVE-2019-19335

During installation of an OpenShift 4 cluster, the openshift-install command line tool creates an auth directory, with kubeconfig and kubeadmin-password files. Both files contain credentials used to authenticate to the OpenShift API server, and are incorrectly assigned word-readable permissions...

4.4CVSS4.8AI score0.00327EPSS
SaveExploits0References1
OSV
OSV
added 2020/03/18 4:15 p.m.35 views

CVE-2019-19335

During installation of an OpenShift 4 cluster, the openshift-install command line tool creates an auth directory, with kubeconfig and kubeadmin-password files. Both files contain credentials used to authenticate to the OpenShift API server, and are incorrectly assigned word-readable permissions...

4.4CVSS6.9AI score0.00327EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2020/03/18 12:00 a.m.13 views

PT-2020-10138 · Red Hat · Openshift

Name of the Vulnerable Software and Affected Versions: OpenShift versions 4.2 Description: The issue arises during the installation of an OpenShift 4 cluster, where the openshift-install command line tool creates an auth directory. This directory contains kubeconfig and kubeadmin-password files,...

4.4CVSS4.6AI score0.00327EPSS
SaveExploits0References4
OpenVAS
OpenVAS
added 2020/03/18 12:00 a.m.25 views

Debian: Security Advisory (DLA-2143-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.3AI score0.0268EPSS
SaveExploits0References3
Microsoft KB
Microsoft KB
added 2020/03/17 12:00 a.m.8 views

March 17, 2020—KB4541334 (Preview of Monthly Rollup)

None None...

6.1AI score
SaveExploits0
Veeam
Veeam
added 2020/03/17 12:00 a.m.26 views

Data corruption due to unreliable SMB (CIFS) shares

Challenge Storages that use the SMB CIFS protocol without the continuous availability and write-through features can cause data corruption in case of technical outages. This can lead to restore or backup problems. Cause If shares operate without the continuous availability feature in the...

7AI score
SaveExploits0
OSV
OSV
added 2020/03/16 2:15 p.m.22 views

CVE-2019-10091

When TLS is enabled with ssl-endpoint-identification-enabled set to true, Apache Geode fails to perform hostname verification of the entries in the certificate SAN during the SSL handshake. This could compromise intra-cluster communication using a man-in-the-middle attack...

7.4CVSS6.7AI score
SaveExploits0References1
CVE
CVE
added 2020/03/16 1:05 p.m.100 views

CVE-2019-10091

CVE-2019-10091 affects Apache Geode. When TLS is enabled and ssl-endpoint-identification-enabled is true, Geode may fail to verify hostnames in the certificate SAN during the SSL handshake, enabling potential man-in-the-middle scenarios and compromising intra-cluster communications. The issue is ...

7.4CVSS7.2AI score0.01417EPSS
SaveExploits0References1Affected Software1
Microsoft KB
Microsoft KB
added 2020/03/10 7:00 a.m.106 views

March 10, 2020—KB4540694 (Security-only update)

None None...

9.3CVSS6.8AI score0.42524EPSS
SaveExploits8
Microsoft KB
Microsoft KB
added 2020/03/10 7:00 a.m.114 views

March 10, 2020—KB4541505 (Security-only update)

None None...

9.3CVSS6.9AI score0.42524EPSS
SaveExploits9
Microsoft KB
Microsoft KB
added 2020/03/10 7:00 a.m.141 views

March 10, 2020—KB4541510 (Monthly Rollup)

None None...

9.3CVSS6.8AI score0.42524EPSS
SaveExploits8
OSV
OSV
added 2020/03/09 3:15 p.m.8 views

CVE-2020-4217

The IBM Spectrum Scale 4.2 and 5.0 file system component is affected by a denial of service security vulnerability. An attacker can force the Spectrum Scale mmfsd/mmsdrserv daemons to unexpectedly exit, impacting the functionality of the Spectrum Scale cluster and the availability of file systems...

7.5CVSS5.8AI score0.01344EPSS
SaveExploits0References2
Prion
Prion
added 2020/03/09 3:15 p.m.17 views

Denial of service

The IBM Spectrum Scale 4.2 and 5.0 file system component is affected by a denial of service security vulnerability. An attacker can force the Spectrum Scale mmfsd/mmsdrserv daemons to unexpectedly exit, impacting the functionality of the Spectrum Scale cluster and the availability of file systems...

5CVSS7.2AI score0.01344EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
added 2020/03/09 12:00 a.m.12 views

IBM Spectrum Scale Denial of Service Vulnerability

IBM Spectrum Scale is a scalable data and file management solution from IBM USA based on IBM GPFS, an enterprise file management system optimized for petabyte-scale storage management. The product supports helping clients reduce storage costs while improving security and management efficiency in...

7.5CVSS6.6AI score0.01344EPSS
SaveExploits0References1
OSV
OSV
added 2020/03/06 9:15 p.m.11 views

CVE-2020-5328

Dell EMC Isilon OneFS versions prior to 8.2.0 contain an unauthorized access vulnerability due to a lack of thorough authorization checks when SyncIQ is licensed, but encrypted syncs are not marked as required. When this happens, loss of control of the cluster can occur...

9.8CVSS7.3AI score0.01387EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2020/03/06 8:25 p.m.25 views

CVE-2020-5328

Dell EMC Isilon OneFS versions prior to 8.2.0 contain an unauthorized access vulnerability due to a lack of thorough authorization checks when SyncIQ is licensed, but encrypted syncs are not marked as required. When this happens, loss of control of the cluster can occur...

9.8CVSS9.4AI score0.01387EPSS
SaveExploits0References1
Rows per page
Query Builder