7525 matches found
CVE-2017-17357
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none...
CVE-2017-17359
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none...
CVE-2017-17360
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none...
CVE-2009-5070
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none...
PT-2020-15540 · Jenkins · Jenkins Ansible Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Ansible Plugin versions 1.0 and earlier Description: The issue is related to missing permission checks in the Jenkins Ansible Plugin, which allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stor...
PT-2020-15539 · Jenkins · Jenkins Kubernetes Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Kubernetes Plugin versions 1.27.3 and earlier Jenkins Kubernetes Plugin versions prior to 1.27.4 Jenkins Kubernetes Plugin versions prior to 1.26.5 Jenkins Kubernetes Plugin versions prior to 1.25.4.1 Jenkins Kubernetes Plugin version...
Apple iOS Authorization Vulnerability
Apple iOS is an operating system for mobile devices developed by Apple Inc. in the United States. A security vulnerability exists in Apple iOS versions prior to 12.1, which stems from the possibility that a local user may be able to read persistent device identifiers. No details of the...
OPENSUSE-SU-2020:1792-1 Security update for apache2
This update for apache2 fixes the following issues: - Enables the patch for CVE-2020-11993 and CVE-2020-9490. The patch was included but not applied in the previous update. bsc1178074 This update was imported from the SUSE:SLE-15:Update update project...
PT-2020-6710 · Samba +5 · Samba +5
Name of the Vulnerable Software and Affected Versions: Samba affected versions not specified Description: The issue is related to insufficient input validation in the Samba package, which can be exploited by a remote attacker to access confidential data, compromise data integrity, and cause a...
Mozilla Firefox, Mozilla Thunderbird: Multiple vulnerabilities
Background Mozilla Firefox is a popular open-source web browser from the Mozilla project. Mozilla Thunderbird is a popular open-source email client from the Mozilla project. Description Multiple vulnerabilities have been discovered in Mozilla Firefox and Mozilla Thunderbird. Please review the CVE...
CVE-2020-3996
Velero prior to 1.4.3 and 1.5.2 in some instances doesn’t properly manage volume identifiers which may result in information leakage to unauthorized users...
CVE-2020-3996
CVE-2020-3996 concerns Velero where, in some deployments, volume identifiers are not managed securely, potentially leaking information to unauthorized users. Affected: Velero versions prior to 1.4.3 and prior to 1.5.2. Impact: partial confidentiality. Remediation/fix/details are not provided in t...
CVE-2020-3996
Velero prior to 1.4.3 and 1.5.2 in some instances doesn’t properly manage volume identifiers which may result in information leakage to unauthorized users...
CVE-2020-17365
creationtimestamp| type| source ---|---|--- 2020-10-21 12:04:45+00:00| seen| https://t.me/thebugbountyhunter/4818 2020-10-21 18:29:30+00:00| seen| https://t.me/canyoupwnme/6653 2020-11-08 07:38:00+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/1967...
libxml2: Multiple vulnerabilities
Background libxml2 is the XML eXtended Markup Language C parser and toolkit initially developed for the Gnome project. Description Multiple vulnerabilities have been discovered in libxml2. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE...
Mozilla Firefox, Mozilla Thunderbird: Multiple vulnerabilities
Background Mozilla Firefox is a popular open-source web browser from the Mozilla project. Mozilla Thunderbird is a popular open-source email client from the Mozilla project. Description Multiple vulnerabilities have been discovered in Mozilla Firefox and Mozilla Thunderbird. Please review the CVE...
Bitcoin: Multiple vulnerabilities
Background Bitcoin Core consists of both “full-node” software for fully validating the blockchain as well as a bitcoin wallet. Description Multiple vulnerabilities have been discovered in Bitcoin. Please review the CVE identifiers referenced below for details. Impact Please review the referenced...
Chromium, Google Chrome: Multiple vulnerabilities
Background Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web. Google Chrome is one fast, simple, and secure browser for all your devices. Description Multiple vulnerabilities have been discovered in Chromium and...
PYSEC-2020-329
In TensorFlow Lite before versions 2.2.1 and 2.3.1, models using segment sum can trigger a write out bounds / segmentation fault if the segment ids are not sorted. Code assumes that the segment ids are in increasing order, using the last element of the tensor holding them to determine the...
