The vulnerability of the Go programming language, related to incorrect calculations, allows attackers to disclose protected information and compromise the integrity of that information.

The vulnerability in the crypto/elliptic/p224.go programming language is related to incorrect calculations. Exploiting this vulnerability can allow a remote attacker to disclose protected information and compromise the integrity of that information...

The vulnerability of the “Client Login” module of the Magento Commerce software platform allows a perpetrator to compromise data integrity.

The vulnerability of the “Client Login” module of the Magento Commerce software platform for online store development and management is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to compromise data integrity...

The vulnerability of Google Chrome’s browser extensions allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of Google Chrome’s browser extensions is related to writing beyond the buffer. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the .NET Framework log4net logging library, related to errors in restricting XML references to external objects (XXE), allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the logging library for the .NET Framework log4net is related to errors caused by XML references to external objects XXE. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

CVE-2021-25283

A flaw was found in Salt. The jinja renderer does not protect against server-side template injection attacks. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

CVE-2021-3148

A flaw was found in salt. Command injection using the SaltAPI, is possible due to json.dumps escaping double quotes while leaving the single quotes untouched. The highest threat from this vulnerability is to data confidentiality and integrity...

CVE-2020-35662

A flaw was found in Salt where several places did not verify the SSL cert by default. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

CVE-2021-3197

A flaw was found in Salt. The Salt-API’s SSH client is vulnerable to a shell injection by including ProxyCommand in an argument, or via sshoptions provided in an API request. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

CVE-2021-25281

A flaw was found in Salt. The Salt-API does not have eAuth credentials for the wheelasync client. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

CVE-2021-20259

A flaw was found in the Foreman project. The Proxmox compute resource exposes the password through the API to an authenticated local attacker with viewhosts permission. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

CVE-2021-20260

A flaw was found in the Foreman project. The Datacenter plugin exposes the password through the API to an authenticated local attacker with viewhosts permission. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

CVE-2021-20256

A flaw was found in Red Hat Satellite. The BMC interface exposes the password through the API to an authenticated local attacker with viewhosts permission. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

CVE-2021-20256

A flaw was found in Red Hat Satellite. The BMC interface exposes the password through the API to an authenticated local attacker with viewhosts permission. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

Design/Logic Flaw

A flaw was found in Red Hat Satellite. The BMC interface exposes the password through the API to an authenticated local attacker with viewhosts permission. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

CVE-2021-20256

The CVE-2021-20256 issue affects Red Hat Satellite (6.10 on Red Hat Enterprise Linux 7) where the BMC controller API could disclose the password to an authenticated local attacker with view_hosts permission. Described in RHSA-2021:4702 and linked advisories, the vulnerability impacts confidential...

CVE-2021-20182

A privilege escalation flaw was found in openshift4/ose-docker-builder. The build container runs with high privileges using a chrooted environment instead of runc. If an attacker can gain access to this build container, they can potentially utilize the raw devices of the underlying node, such as...

CVE-2021-20182

CVE-2021-20182 describes a privilege-escalation flaw in the OpenShift builder component openshift4/ose-docker-builder. The build container runs with high privileges in a chrooted environment instead of using runc, which could allow an attacker with access to the build container to access raw node...

CVE-2021-20247

A flaw was found in mbsync before v1.3.5 and v1.4.1. Validations of the mailbox names returned by IMAP LIST/LSUB do not occur allowing a malicious or compromised server to use specially crafted mailbox names containing '..' path components to access data outside the designated mailbox on the...

CVE-2021-20247

A flaw was found in mbsync before v1.3.5 and v1.4.1. Validations of the mailbox names returned by IMAP LIST/LSUB do not occur allowing a malicious or compromised server to use specially crafted mailbox names containing '..' path components to access data outside the designated mailbox on the...

DEBIAN-CVE-2021-20247

A flaw was found in mbsync before v1.3.5 and v1.4.1. Validations of the mailbox names returned by IMAP LIST/LSUB do not occur allowing a malicious or compromised server to use specially crafted mailbox names containing '..' path components to access data outside the designated mailbox on the...