Lucene search
+L

8389 matches found

RedHat Linux
RedHat Linux
added 2020/09/23 2:14 p.m.63 views

Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.3.38 container image security update

An update for openshift-enterprise-hyperkube-container and sriov-dp-admission-controller-container is now available for Red Hat OpenShift Container Platform 4.3. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base...

7.5CVSS6.7AI score0.20521EPSS
SaveExploits6References3
RedHat Linux
RedHat Linux
added 2020/09/21 7:50 p.m.50 views

Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.5.11 ose-cluster-svcat-apiserver-operator-container security update

An update for ose-cluster-svcat-apiserver-operator-container is now available for Red Hat OpenShift Container Platform 4.5. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severit...

7.5CVSS6.8AI score0.0184EPSS
SaveExploits0References2
OSV
OSV
added 2020/09/18 6:15 p.m.13 views

CVE-2020-7945

Local registry credentials were included directly in the CD4PE deployment definition, which could expose these credentials to users who should not have access to them. This is resolved in Continuous Delivery for Puppet Enterprise 4.0.1...

5.5CVSS6.1AI score0.00306EPSS
SaveExploits0References1
NVD
NVD
added 2020/09/18 6:15 p.m.26 views

CVE-2020-7945

Local registry credentials were included directly in the CD4PE deployment definition, which could expose these credentials to users who should not have access to them. This is resolved in Continuous Delivery for Puppet Enterprise 4.0.1...

5.5CVSS0.00306EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2020/09/18 5:58 p.m.35 views

CVE-2020-7945

Local registry credentials were included directly in the CD4PE deployment definition, which could expose these credentials to users who should not have access to them. This is resolved in Continuous Delivery for Puppet Enterprise 4.0.1...

5.5AI score0.00306EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/09/18 12:00 a.m.13 views

IBM Spectrum Scale Denial of Service Vulnerability (CNVD-2020-54939)

IBM Spectrum Scale is a scalable data and file management solution from IBM USA based on IBM GPFS, an enterprise file management system optimized for petabyte-scale storage management. The product supports helping clients reduce storage costs while improving security and management efficiency in...

6.2CVSS6.5AI score0.00319EPSS
SaveExploits0References1
NVD
NVD
added 2020/09/16 6:15 p.m.30 views

CVE-2020-14306

An incorrect access control flaw was found in the operator, openshift-service-mesh/istio-rhel8-operator all versions through 1.1.3. This flaw allows an attacker with a basic level of access to the cluster to deploy a custom gateway/pod to any namespace, potentially gaining access to privileged...

8.8CVSS0.013EPSS
SaveExploits0References2
CNVD
CNVD
added 2020/09/16 12:00 a.m.12 views

IBM Elastic Storage Server Spectrum Scale Denial of Service Vulnerability (CNVD-2020-52392)

IBM Spectrum Scale is a scalable data and file management solution from IBM USA based on IBM GPFS, an enterprise file management system optimized for petabyte-scale storage management. The product supports helping clients reduce storage costs while improving security and management efficiency in...

6.5CVSS6.5AI score0.01055EPSS
SaveExploits0References1
OSV
OSV
added 2020/09/15 6:15 p.m.22 views

CVE-2020-15179

The ScratchSig extension for MediaWiki before version 1.0.1 allows stored Cross-Site Scripting. Using tag inside tag, attackers with edit permission can execute scripts on visitors' browser. With MediaWiki JavaScript API, this can potentially lead to privilege escalation and/or account takeover...

9CVSS6.9AI score
SaveExploits0References2
Prion
Prion
added 2020/09/15 6:15 p.m.17 views

Cross site scripting

The ScratchSig extension for MediaWiki before version 1.0.1 allows stored Cross-Site Scripting. Using tag inside tag, attackers with edit permission can execute scripts on visitors' browser. With MediaWiki JavaScript API, this can potentially lead to privilege escalation and/or account takeover...

4.6CVSS9.1AI score0.0122EPSS
SaveExploits0References2Affected Software1
Veeam
Veeam
added 2020/09/15 12:00 a.m.23 views

Azure VMware Solution Support — Considerations and Limitations

Challenge Azure VMware Solution AVS is a VMware Cloud Verified offering that requires specific considerations to work with Veeam Backup & Replication. Aside from the listed instructions and limitations below, you can use AVS with Veeam Backup & Replication like you would any other VMware vSphere...

5.5AI score
SaveExploits0Affected Software1
OSV
OSV
added 2020/09/09 4:15 p.m.13 views

CVE-2020-24566

In Octopus Deploy 2020.3.x before 2020.3.4 and 2020.4.x before 2020.4.1, if an authenticated user creates a deployment or runbook process using Azure steps and sets the step's execution location to run on the server/worker, then under certain circumstances the account password is exposed in...

7.5CVSS7.2AI score0.01812EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2020/09/09 3:23 p.m.40 views

Important: Red Hat Security Advisory: OpenShift Container Platform 4.3.35 jenkins-2-plugins security update

An update for jenkins-2-plugins is now available for Red Hat OpenShift Container Platform 4.3. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

8.8CVSS7.1AI score0.01428EPSS
SaveExploits0References8
Krebs on Security
Krebs on Security
added 2020/09/08 9:33 p.m.297 views

Microsoft Patch Tuesday, Sept. 2020 Edition

Microsoft today released updates to remedy nearly 130 security vulnerabilities in its Windows operating system and supported software. None of the flaws are known to be currently under active exploitation, but 23 of them could be exploited by malware or malcontents to seize complete control of...

9CVSS0.99965EPSS
SaveExploits64
Microsoft KB
Microsoft KB
added 2020/09/08 7:00 a.m.51 views

Description of the security update for Office 2016: September 8, 2020 (KB4484466)

None None...

8.8CVSS6.7AI score0.03833EPSS
SaveExploits1
Microsoft KB
Microsoft KB
added 2020/09/08 7:00 a.m.82 views

Description of the security update for SharePoint Server 2010: September 8, 2020

Description of the security update for SharePoint Server 2010: September 8, 2020 Summary This security update resolves a remote code execution vulnerability that exists in Microsoft Excel if the software does not check the source markup of an application package. To learn more about the...

9.9CVSS8.7AI score0.01901EPSS
SaveExploits1
Microsoft KB
Microsoft KB
added 2020/09/08 7:00 a.m.54 views

Description of the security update for Excel 2010: September 8, 2020

Description of the security update for Excel 2010: September 8, 2020 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see the following...

8.8CVSS7.4AI score0.04352EPSS
SaveExploits0
Microsoft KB
Microsoft KB
added 2020/09/08 7:00 a.m.115 views

Description of the security update for Office Online Server: September 8, 2020

None None...

8.8CVSS6.7AI score0.04352EPSS
SaveExploits1
Microsoft KB
Microsoft KB
added 2020/09/08 7:00 a.m.60 views

Description of the security update for SharePoint Foundation 2013: September 8, 2020

Description of the security update for SharePoint Foundation 2013: September 8, 2020 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see...

8.8CVSS7.7AI score0.03703EPSS
SaveExploits1
Microsoft KB
Microsoft KB
added 2020/09/08 7:00 a.m.104 views

Description of the security update for SharePoint Enterprise Server 2013: September 8, 2020

None None...

9.9CVSS6.7AI score0.03703EPSS
SaveExploits2
Rows per page
Query Builder