5517 matches found
glibc security, bug fix, and enhancement update
2.17-317.0.1 - Merge RH el7 u8 patches with Oracle patches Review-exception: Simple merge - Adding Mike Fabians C.utf-8 patch C.utf-8 is a unicode-aware version of the C locale Orabug 29784239. Reviewed-by: Jose E. Marchesi - Remove glibc-ora28641867.patch as duplicate of glibc-rh1705899-4.patch ...
Arbitrary Code Execution
github.com/helm/helm is vulnerable to arbitrary code execution. Duplicate plugin entries allows an attacker to compromise a plugin's install hooks, via a man-in-the-middle attack, and possibly execute arbitrary code on the host OS...
CVE-2020-15187 Duplicate plugin entries in Helm
In Helm before versions 2.16.11 and 3.3.2, a Helm plugin can contain duplicates of the same entry, with the last one always used. If a plugin is compromised, this lowers the level of access that an attacker needs to modify a plugin's install hooks, causing a local execution attack. To perform thi...
CVE-2020-0435
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-14615. Reason: This candidate is a duplicate of CVE-2018-14615. Notes: All CVE users should reference CVE-2018-14615 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage...
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-14615. Reason: This candidate is a duplicate of CVE-2018-14615. Notes: All CVE users should reference CVE-2018-14615 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
CVE-2020-0435
CVE-2020-0435 is rejected/not used; this ID duplicates CVE-2018-14615.
PT-2020-14256 · Helm +2 · Helm +2
Name of the Vulnerable Software and Affected Versions: Helm versions prior to 2.16.11 Helm versions prior to 3.3.2 Description: A Helm repository can contain duplicates of the same chart, with the last one always used. If a repository is compromised, this lowers the level of access that an attack...
PT-2020-14258 · Helm +2 · Helm +2
Name of the Vulnerable Software and Affected Versions: Helm versions prior to 2.16.11 Helm versions prior to 3.3.2 Description: A Helm plugin can contain duplicates of the same entry, with the last one always used. If a plugin is compromised, this lowers the level of access that an attacker needs...
Visma Public: Bypassing Business ID/VAT # validation during registration to create accounts with duplicate Business ID/VAT #
The security researcher was able to bypass the Business ID/VAT validation that is required during registration. By doing this he was able to create accounts with duplicate Business ID/VAT...
openSIS SQL Injection Vulnerability (CNVD-2020-50531)
openSIS is a free, open source student information system/school management software. A SQL injection vulnerability exists in the fn parameter in CheckDuplicateStudent.php in openSIS 7.3. An attacker can exploit this vulnerability by sending an HTTP request to perform a SQL injection attack...
openSIS SQL Injection Vulnerability (CNVD-2020-50529)
openSIS is a free, open source student information system/school management software. A SQL injection vulnerability exists in the bmonth parameter in CheckDuplicateStudent.php in openSIS 7.3. An attacker can exploit this vulnerability by sending an HTTP request to perform a SQL injection attack...
GHSA-5J4M-89XF-MF5P Missing Origin Validation in parcel-bundler
Withdrawn: Duplicate of GHSA-37q6-576q-vgr7...
Open Redirect in hekto
Withdrawn: Duplicate of GHSA-qmm9-x5gr-4gfm...
Cross-Site Scripting in keystone
Withdrawn: Duplicate of GHSA-7qcx-jmrc-h2rr...
GHSA-H29R-4VQP-8JXF Cross-Site Scripting in keystone
Withdrawn: Duplicate of GHSA-7qcx-jmrc-h2rr...
Regular Expression Denial of Service in highcharts
Withdrawn: Duplicate of GHSA-xmc8-cjfr-phx3...
Sandbox Breakout / Arbitrary Code Execution in safer-eval
Withdrawn: Duplicate of GHSA-hgch-jjmr-gp7w...
GHSA-Q9R2-F3VC-RJG8 Command Injection in macaddress
Withdrawn: Duplicate of GHSA-pp57-mqmh-44h7...