Lucene search
+L

4218 matches found

osv_ghsa
osv_ghsa
•added 2021/12/17 8:41 p.m.•29 views

GHSA-G7P8-R2CH-4RMF Malicious Atomix node queries expose sensitive information

An issue in Atomix v3.1.5 allows attackers to access sensitive information when a malicious Atomix node queries distributed variable primitives which contain the entire primitive lists that ONOS nodes use to share important states...

6.5CVSS5.9AI score0.00871EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2021/12/17 8:41 p.m.•34 views

Malicious Atomix node queries expose sensitive information

An issue in Atomix v3.1.5 allows attackers to access sensitive information when a malicious Atomix node queries distributed variable primitives which contain the entire primitive lists that ONOS nodes use to share important states...

6.5CVSS6AI score0.00871EPSS
SaveExploits0References3Affected Software1
osv_cve
osv_cve
•added 2021/12/16 8:15 p.m.•22 views

CVE-2020-35215

An issue in Atomix v3.1.5 allows attackers to access sensitive information when a malicious Atomix node queries distributed variable primitives which contain the entire primitive lists that ONOS nodes use to share important states...

6.5CVSS5.8AI score0.00871EPSS
SaveExploits0References1
NVD
NVD
•added 2021/12/16 8:15 p.m.•52 views

CVE-2020-35215

An issue in Atomix v3.1.5 allows attackers to access sensitive information when a malicious Atomix node queries distributed variable primitives which contain the entire primitive lists that ONOS nodes use to share important states...

6.5CVSS0.00871EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2021/12/16 7:08 p.m.•58 views

CVE-2020-35215

An issue in Atomix v3.1.5 allows attackers to access sensitive information when a malicious Atomix node queries distributed variable primitives which contain the entire primitive lists that ONOS nodes use to share important states...

6.2AI score0.00871EPSS
SaveExploits0References1
Mend
Mend
•added 2021/12/16 7:08 p.m.•9 views

CVE-2020-35215

An issue in Atomix v3.1.5 allows attackers to access sensitive information when a malicious Atomix node queries distributed variable primitives which contain the entire primitive lists that ONOS nodes use to share important states...

7.1CVSS0.00871EPSS
SaveExploits0References3
CVE
CVE
•added 2021/12/16 7:08 p.m.•113 views

CVE-2020-35215

CVE-2020-35215 affects Atomix v3.1.5. A malicious Atomix node querying distributed variable primitives can access the full lists of primitives that ONOS nodes use to share important state, causing information disclosure. The connected Red Hat, CNVD, CVE/CVE ecosystem entries corroborate an inform...

6.5CVSS6.1AI score0.00871EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/16 12:00 a.m.•5 views

CVE-2020-35215: Exposure of Resource to Wrong Sphere

An issue in Atomix v3.1.5 allows attackers to access sensitive information when a malicious Atomix node queries distributed variable primitives which contain the entire primitive lists that ONOS nodes use to share important states...

6.5CVSS5.8AI score0.00871EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/12/16 12:00 a.m.•22 views

Atomix security vulnerabilities

Atomix is a fault-tolerant distributed orchestration framework for JAVA 8. An unspecified vulnerability exists in Atomix version 3.1.5. The vulnerability allows malicious Atomix nodes to remove state from ONOS storage by abusing raw operations. No details of the vulnerability are currently...

8.1CVSS5.6AI score0.00824EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/12/16 12:00 a.m.•4 views

PT-2021-11730

Name of the Vulnerable Software and Affected Versions: Atomix version 3.1.5 Description: An issue in Atomix allows attackers to access sensitive information when a malicious Atomix node queries distributed variable primitives, which contain the entire primitive lists that ONOS nodes use to share...

6.5CVSS0.00871EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2021/12/16 12:00 a.m.•20 views

Atomix resource management error vulnerability

Atomix is an embeddable library that helps achieve fault tolerance and consistency for distributed resources. It provides a rich set of APIs for managing its resources, such as collections, groups, and concurrent tools. Atomix v3.1.5 is vulnerable to a resource management error that can be...

6.5CVSS5.5AI score0.0091EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
•added 2021/12/14 9:49 p.m.•135 views

Critical: Red Hat Security Advisory: Red Hat AMQ Streams 1.8.4 release and security update

Red Hat AMQ Streams 1.8.4 is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

10CVSS7.4AI score0.99999EPSS
SaveExploits394References4
RedHat Linux
RedHat Linux
•added 2021/12/14 9:13 p.m.•150 views

Critical: Red Hat Security Advisory: Red Hat AMQ Streams 1.6.5 release and security update

Red Hat AMQ Streams 1.6.5 is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

10CVSS7.4AI score0.99999EPSS
SaveExploits394References4
RedHat Linux
RedHat Linux
•added 2021/12/14 8:03 p.m.•180 views

Critical: Red Hat Security Advisory: Red Hat Data Grid 8.2.2 security update

An update for Red Hat Data Grid is now available. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the...

10CVSS7.4AI score0.99999EPSS
SaveExploits394References5
CNNVD
CNNVD
•added 2021/12/14 12:00 a.m.•24 views

UiPath Assistant security vulnerabilities

UiPath Assistant is a specialized tool from UiPath designed to make interacting with bots from the desktop easy and fun.A security vulnerability exists in UiPath Assistant 21.4.4, which stems from a lack of effective trust management mechanisms in networked systems or products. An attacker could...

10CVSS5.9AI score0.01805EPSS
SaveExploits0References2
osv_debian
osv_debian
•added 2021/12/13 1:15 a.m.•14 views

DEBIAN-CVE-2021-44847

A stack-based buffer overflow in handlerequest function in DHT.c in toxcore 0.1.9 through 0.1.11 and 0.2.0 through 0.2.12 caused by an improper length calculation during the handling of received network packets allows remote attackers to crash the process or potentially execute arbitrary code via...

9.8CVSS9.5AI score0.04135EPSS
SaveExploits1References1
osv_ubuntu
osv_ubuntu
•added 2021/12/13 1:15 a.m.•23 views

UBUNTU-CVE-2018-25022

The Onion module in toxcore before 0.2.2 doesn't restrict which packets can be onion-routed, which allows a remote attacker to discover a target user's IP address when knowing only their Tox Id by positioning themselves close to target's Tox Id in the DHT for the target to establish an onion...

3.1CVSS5.8AI score0.01555EPSS
SaveExploits1References5
BDU FSTEC
BDU FSTEC
•added 2021/12/13 12:00 a.m.•18 views

Distributed File HarmonyOS Information Disclosure

The vulnerability of the Distributed File component in the HarmonyOS operating system exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose the protected information...

7.8CVSS7.2AI score0.00695EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/12/13 12:00 a.m.•19 views

Distributed File HarmonyOS Cryptographic Error Read Delete

The vulnerability of the Distributed File component in the HarmonyOS operating system is related to errors in cryptographic transformations. Exploiting this vulnerability allows a malicious actor to remotely read and delete images from Harmony devices...

4.6CVSS7.7AI score0.00765EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
•added 2021/12/08 12:00 a.m.•65 views

Huawei HarmonyOS Stack Buffer Overflow Vulnerability (CNVD-2021-99967)

Huawei HarmonyOS is an operating system from Huawei China. It provides a microkernel-based distributed operating system. A stack buffer overflow vulnerability exists in the Kernel module of Huawei HarmonyOS, which provides a microkernel-based, full-scenario distributed operating system. An attack...

9.1CVSS3.7AI score0.00777EPSS
SaveExploits0References1
Rows per page
Query Builder