Lucene search
+L

10643 matches found

BDU FSTEC
BDU FSTEC
•added 2020/04/23 12:00 a.m.•22 views

The vulnerability of Google Chrome’s browser, related to insufficient validation of input data, allows attackers to compromise data integrity.

The vulnerability of Google Chrome is related to improper policy checking during navigation. Exploiting this vulnerability can allow a malicious actor to compromise data integrity remotely...

4.3CVSS6.4AI score0.00688EPSS
SaveExploits0References7Affected Software2
BDU FSTEC
BDU FSTEC
•added 2020/04/23 12:00 a.m.•16 views

The vulnerability of Google Chrome, related to writing beyond the buffer of memory, allows a perpetrator to gain unauthorized access to protected information and compromise its integrity and accessibility.

The vulnerability of Google Chrome relates to the writing beyond the buffer of the memory buffer. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information and compromise its integrity and availability through a specially created HTML file...

9.3CVSS7.5AI score0.0184EPSS
SaveExploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
•added 2020/04/23 12:00 a.m.•22 views

Vulnerability in the library for processing and transforming HTML/XML code fragments: The Ruby loofah library has a vulnerability related to the lack of protection for website structure. This allows attackers to compromise data integrity.

The vulnerability in the library for processing and transforming HTML/XML code fragments in Ruby Loofah is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to compromise the integrity of data...

5.4CVSS6.5AI score0.01561EPSS
SaveExploits0References10Affected Software7
BDU FSTEC
BDU FSTEC
•added 2020/04/23 12:00 a.m.•21 views

The vulnerability of the Service Worker component in Google Chrome’s web browser allows a attacker to compromise data integrity, cause service failures, or gain unauthorized access to confidential information.

The vulnerability of the Service Worker component in Google Chrome browser relates to the use of freed memory areas. Exploiting this vulnerability could allow an attacker to compromise data integrity, cause service failures, or gain unauthorized access to confidential information through a...

9.3CVSS7.6AI score0.01365EPSS
SaveExploits0References10Affected Software5
BDU FSTEC
BDU FSTEC
•added 2020/04/23 12:00 a.m.•13 views

The vulnerability of the load_image function in the libcaca graphics library allows a hacker to gain unauthorized access to information and compromise its integrity and accessibility.

The vulnerability of the loadimage function in the libcaca graphics library is related to integer overflow. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to information and compromise its integrity and accessibility...

9.3CVSS6.4AI score0.01806EPSS
SaveExploits1References11Affected Software6
BDU FSTEC
BDU FSTEC
•added 2020/04/23 12:00 a.m.•13 views

The vulnerability of Google Chrome, related to the execution of operations beyond the buffer in memory, allows an attacker to gain unauthorized access to protected information and compromise its integrity and accessibility.

The vulnerability of Google Chrome relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information and compromise its integrity and availability through a specially created HTML file...

9.3CVSS7.8AI score0.02193EPSS
SaveExploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
•added 2020/04/23 12:00 a.m.•22 views

The vulnerability of Google Chrome’s browser, related to insufficient validation of input data, allows attackers to compromise data integrity.

The vulnerability of Google Chrome is related to insufficient security of its interface. Exploiting this vulnerability could allow a malicious actor to compromise data integrity remotely...

7.1CVSS7AI score0.01392EPSS
SaveExploits0References8Affected Software4
BDU FSTEC
BDU FSTEC
•added 2020/04/23 12:00 a.m.•11 views

The vulnerability of Google Chrome, related to insufficient validation of input data, allows a perpetrator to compromise data integrity.

The vulnerability of Google Chrome is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to compromise the integrity of data...

7.1CVSS7.1AI score0.01285EPSS
SaveExploits0References11Affected Software5
NVD
NVD
•added 2020/04/22 4:15 p.m.•68 views

CVE-2020-10712

A flaw was found in OpenShift Container Platform version 4.1 and later. Sensitive information was found to be logged by the image registry operator allowing an attacker able to gain access to those logs, to read and write to the storage backing the internal image registry. The highest threat from...

8.2CVSS7.3AI score0.00994EPSS
SaveExploits0References1
OSV
OSV
•added 2020/04/22 4:15 p.m.•19 views

CVE-2020-10712

A flaw was found in OpenShift Container Platform version 4.1 and later. Sensitive information was found to be logged by the image registry operator allowing an attacker able to gain access to those logs, to read and write to the storage backing the internal image registry. The highest threat from...

8.2CVSS7.2AI score0.00994EPSS
SaveExploits0References1
Prion
Prion
•added 2020/04/22 4:15 p.m.•30 views

Design/Logic Flaw

A flaw was found in OpenShift Container Platform version 4.1 and later. Sensitive information was found to be logged by the image registry operator allowing an attacker able to gain access to those logs, to read and write to the storage backing the internal image registry. The highest threat from...

6.4CVSS8AI score0.00994EPSS
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
•added 2020/04/22 3:34 p.m.•35 views

CVE-2020-11620

A flaw was found in jackson-databind 2.x. The interaction between serialization gadgets and typing is mishandled. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. Mitigation The following conditions are needed for an exploit, we...

8.1CVSS2.2AI score0.0578EPSS
SaveExploits0References3
CVE
CVE
•added 2020/04/22 3:29 p.m.•159 views

CVE-2020-10712

OpenShift Container Platform (OCP) versions 4.1 and later are affected by CVE-2020-10712, where the image registry operator logs can disclose sensitive information, allowing an attacker with access to those logs to read/write to the storage backing the internal image registry. Impact is primarily...

8.2CVSS8AI score0.00994EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2020/04/22 3:29 p.m.•70 views

CVE-2020-10712

A flaw was found in OpenShift Container Platform version 4.1 and later. Sensitive information was found to be logged by the image registry operator allowing an attacker able to gain access to those logs, to read and write to the storage backing the internal image registry. The highest threat from...

7CVSS8.1AI score0.00994EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
•added 2020/04/22 2:11 p.m.•12 views

Ansible: code injection when using ansible_facts as a subkey

A flaw was found in the Ansible Engine. When using ansiblefacts as a subkey of itself, and promoting it to a variable when injecting is enabled, overwriting the ansiblefacts after the clean, an attacker could take advantage of this by altering the ansiblefacts leading to privilege escalation or...

7.9CVSS7.2AI score0.00334EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2020/04/22 2:10 p.m.•21 views

Ansible: code injection when using ansible_facts as a subkey

A flaw was found in the Ansible Engine. When using ansiblefacts as a subkey of itself, and promoting it to a variable when injecting is enabled, overwriting the ansiblefacts after the clean, an attacker could take advantage of this by altering the ansiblefacts leading to privilege escalation or...

7.9CVSS7.2AI score0.00334EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2020/04/22 2:10 p.m.•13 views

Ansible: code injection when using ansible_facts as a subkey

A flaw was found in the Ansible Engine. When using ansiblefacts as a subkey of itself, and promoting it to a variable when injecting is enabled, overwriting the ansiblefacts after the clean, an attacker could take advantage of this by altering the ansiblefacts leading to privilege escalation or...

7.9CVSS7.2AI score0.00334EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2020/04/22 12:00 a.m.•13 views

The vulnerability in the user interface of Google Chrome’s Chromium browser allows a hacker to compromise data integrity.

The vulnerability of Google Chrome’s Chromium user interface is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially crafted HTML page...

5.3CVSS6.7AI score0.00754EPSS
SaveExploits0References9Affected Software4
BDU FSTEC
BDU FSTEC
•added 2020/04/22 12:00 a.m.•12 views

The vulnerability of Google Chrome’s browser extension security policies allows attackers to compromise data integrity.

The vulnerability of Google Chrome’s browser extension security policies is related to the lack of a mechanism for verifying input data. Exploiting this vulnerability allows an attacker to manipulate data integrity through the created HTML page...

7.1CVSS6.5AI score0.01312EPSS
SaveExploits0References9Affected Software4
BDU FSTEC
BDU FSTEC
•added 2020/04/22 12:00 a.m.•12 views

The vulnerability in the user interface of Google Chrome’s Chromium browser allows a hacker to compromise data integrity.

The vulnerability of the user interface of Google Chrome’s Chromium browser is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise data integrity through a specially created HTML page...

4.3CVSS6.5AI score0.00681EPSS
SaveExploits0References9Affected Software4
Rows per page
Query Builder