Lucene search
+L

9563 matches found

BDU FSTEC
BDU FSTEC
added 2020/04/23 12:00 a.m.12 views

The vulnerability of Google Chrome, related to the execution of operations beyond the buffer in memory, allows an attacker to gain unauthorized access to protected information and compromise its integrity and accessibility.

The vulnerability of Google Chrome relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information and compromise its integrity and availability through a specially created HTML file...

9.3CVSS7.8AI score0.02193EPSS
SaveExploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2020/04/23 12:00 a.m.14 views

The vulnerability of Google Chrome, related to writing beyond the buffer of memory, allows a perpetrator to gain unauthorized access to protected information and compromise its integrity and accessibility.

The vulnerability of Google Chrome relates to the writing beyond the buffer of the memory buffer. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information and compromise its integrity and availability through a specially created HTML file...

9.3CVSS7.5AI score0.0184EPSS
SaveExploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2020/04/23 12:00 a.m.16 views

The vulnerability of Google Chrome’s browser, related to insufficient validation of input data, allows attackers to compromise data integrity.

The vulnerability of Google Chrome is related to improper policy checking during navigation. Exploiting this vulnerability can allow a malicious actor to compromise data integrity remotely...

4.3CVSS6.4AI score0.00688EPSS
SaveExploits0References7Affected Software2
BDU FSTEC
BDU FSTEC
added 2020/04/23 12:00 a.m.16 views

Vulnerability in the library for processing and transforming HTML/XML code fragments: The Ruby loofah library has a vulnerability related to the lack of protection for website structure. This allows attackers to compromise data integrity.

The vulnerability in the library for processing and transforming HTML/XML code fragments in Ruby Loofah is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to compromise the integrity of data...

5.4CVSS6.5AI score0.01561EPSS
SaveExploits0References10Affected Software7
BDU FSTEC
BDU FSTEC
added 2020/04/23 12:00 a.m.16 views

The vulnerability of Google Chrome’s browser, related to insufficient validation of input data, allows attackers to compromise data integrity.

The vulnerability of Google Chrome is related to insufficient security of its interface. Exploiting this vulnerability could allow a malicious actor to compromise data integrity remotely...

7.1CVSS7AI score0.0139EPSS
SaveExploits0References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/04/23 12:00 a.m.9 views

The vulnerability of Google Chrome, related to insufficient validation of input data, allows a perpetrator to compromise data integrity.

The vulnerability of Google Chrome is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to compromise the integrity of data...

7.1CVSS7.1AI score0.01285EPSS
SaveExploits0References11Affected Software5
NVD
NVD
added 2020/04/22 4:15 p.m.63 views

CVE-2020-10712

A flaw was found in OpenShift Container Platform version 4.1 and later. Sensitive information was found to be logged by the image registry operator allowing an attacker able to gain access to those logs, to read and write to the storage backing the internal image registry. The highest threat from...

8.2CVSS7.3AI score0.0097EPSS
SaveExploits0References1
OSV
OSV
added 2020/04/22 4:15 p.m.11 views

CVE-2020-10712

A flaw was found in OpenShift Container Platform version 4.1 and later. Sensitive information was found to be logged by the image registry operator allowing an attacker able to gain access to those logs, to read and write to the storage backing the internal image registry. The highest threat from...

8.2CVSS7.2AI score0.0097EPSS
SaveExploits0References1
Prion
Prion
added 2020/04/22 4:15 p.m.26 views

Design/Logic Flaw

A flaw was found in OpenShift Container Platform version 4.1 and later. Sensitive information was found to be logged by the image registry operator allowing an attacker able to gain access to those logs, to read and write to the storage backing the internal image registry. The highest threat from...

6.4CVSS8AI score0.0097EPSS
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2020/04/22 3:34 p.m.33 views

CVE-2020-11620

A flaw was found in jackson-databind 2.x. The interaction between serialization gadgets and typing is mishandled. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. Mitigation The following conditions are needed for an exploit, we...

8.1CVSS2.2AI score0.0578EPSS
SaveExploits0References3
CVE
CVE
added 2020/04/22 3:29 p.m.150 views

CVE-2020-10712

OpenShift Container Platform (OCP) versions 4.1 and later are affected by CVE-2020-10712, where the image registry operator logs can disclose sensitive information, allowing an attacker with access to those logs to read/write to the storage backing the internal image registry. Impact is primarily...

8.2CVSS8AI score0.0097EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2020/04/22 3:29 p.m.64 views

CVE-2020-10712

A flaw was found in OpenShift Container Platform version 4.1 and later. Sensitive information was found to be logged by the image registry operator allowing an attacker able to gain access to those logs, to read and write to the storage backing the internal image registry. The highest threat from...

7CVSS8.1AI score0.0097EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2020/04/22 2:11 p.m.9 views

Ansible: code injection when using ansible_facts as a subkey

A flaw was found in the Ansible Engine. When using ansiblefacts as a subkey of itself, and promoting it to a variable when injecting is enabled, overwriting the ansiblefacts after the clean, an attacker could take advantage of this by altering the ansiblefacts leading to privilege escalation or...

7.9CVSS7.2AI score0.00347EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2020/04/22 2:10 p.m.17 views

Ansible: code injection when using ansible_facts as a subkey

A flaw was found in the Ansible Engine. When using ansiblefacts as a subkey of itself, and promoting it to a variable when injecting is enabled, overwriting the ansiblefacts after the clean, an attacker could take advantage of this by altering the ansiblefacts leading to privilege escalation or...

7.9CVSS7.2AI score0.00347EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2020/04/22 2:10 p.m.10 views

Ansible: code injection when using ansible_facts as a subkey

A flaw was found in the Ansible Engine. When using ansiblefacts as a subkey of itself, and promoting it to a variable when injecting is enabled, overwriting the ansiblefacts after the clean, an attacker could take advantage of this by altering the ansiblefacts leading to privilege escalation or...

7.9CVSS7.2AI score0.00347EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2020/04/22 12:00 a.m.10 views

The vulnerability in the user interface of Google Chrome’s Chromium browser allows a hacker to compromise data integrity.

The vulnerability of the user interface of Google Chrome’s Chromium browser is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise data integrity through a specially created HTML page...

4.3CVSS6.5AI score0.00681EPSS
SaveExploits0References9Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/04/22 12:00 a.m.10 views

The vulnerability of Google Chrome’s browser extension security policies allows attackers to compromise data integrity.

The vulnerability of Google Chrome’s browser extension security policies is related to the lack of a mechanism for verifying input data. Exploiting this vulnerability allows an attacker to manipulate data integrity through the created HTML page...

7.1CVSS6.5AI score0.01584EPSS
SaveExploits0References9Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/04/22 12:00 a.m.9 views

The vulnerability of the recursive cloning component of the distributed Git version control system allows a hacker to gain unauthorized access to confidential data, cause service failures, and compromise data integrity.

The vulnerability of the recursive cloning component of the distributed version control system Git is related to the lack of a mechanism for verifying input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential data, cause service failures, and...

9.3CVSS7.4AI score0.34007EPSS
SaveExploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2020/04/22 12:00 a.m.12 views

The vulnerability of the rendering kernel of Google Chrome’s Blink web pages, related to improper restriction of the user interface frames that are displayed, allows attackers to compromise data integrity.

The vulnerability of the rendering kernel of Google Chrome’s Blink web pages is related to improper restrictions on the frames that are displayed in the user interface. Exploiting this vulnerability could allow a malicious actor to compromise data integrity through a specially created HTML page...

4.3CVSS6.6AI score0.0064EPSS
SaveExploits0References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/04/22 12:00 a.m.12 views

The vulnerability in the user interface of Google Chrome’s Chromium browser allows a hacker to compromise data integrity.

The vulnerability of Google Chrome’s Chromium user interface is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially crafted HTML page...

5.3CVSS6.7AI score0.00754EPSS
SaveExploits0References9Affected Software4
Rows per page
Query Builder