Lucene search
+L

2541 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/01/15 12:00 a.m.•4 views

CVE-2020-2614: Undefined Security Weakness

Vulnerability in the Enterprise Manager for Fusion Middleware product of Oracle Enterprise Manager component: APM Mesh. Supported versions that are affected are 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise...

6.5CVSS6AI score0.01159EPSS
SaveExploits0References1
CNVD
CNVD
•added 2020/01/14 12:00 a.m.•19 views

Cisco Webex Video Mesh Software Command Injection Vulnerability

Cisco Webex Video Mesh Software releases is a web-based video conferencing solution. A command injection vulnerability in the web management interface in versions prior to Cisco Webex Video Mesh Software releases 2019.09.19.1956m stems from the interface failing to properly validate user-submitte...

9CVSS8.3AI score0.03507EPSS
SaveExploits0References1
Symantec
Symantec
•added 2020/01/14 12:00 a.m.•34 views

Oracle Enterprise Manager for Fusion Middleware CVE-2020-2614 Remote Security Vulnerability

Description Oracle Enterprise Manager for Fusion Middleware is prone to a remote security vulnerability. The vulnerability can be exploited over 'HTTP' protocol. The 'APM Mesh' component is affected. This vulnerability affects the following supported versions: 13.2, 13.3 Technologies Affected...

1AI score0.01159EPSS
SaveExploits0References1Affected Software1
Cisco
Cisco
•added 2020/01/08 4:00 p.m.•53 views

Cisco Webex Video Mesh Node Command Injection Vulnerability

A vulnerability in the web-based management interface of Cisco Webex Video Mesh could allow an authenticated, remote attacker to execute arbitrary commands on the affected system. The vulnerability is due to improper validation of user-supplied input by the web-based management interface of the...

7.2CVSS3.1AI score0.03507EPSS
SaveExploits0References1
Symantec
Symantec
•added 2020/01/08 12:00 a.m.•39 views

Cisco Webex Video Mesh Software CVE-2019-16005 Remote Command Injection Vulnerability

Description Cisco Webex Video Mesh Software is prone to a remote command injection vulnerability. Successfully exploiting this issue may allow an attacker to execute arbitrary commands with root privileges in the context of the affected device. This issue is being tracked by Cisco Bug ID...

1.6AI score0.03507EPSS
SaveExploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
•added 2019/12/13 12:00 a.m.•68 views

RHEL 7 / 8 : Red Hat OpenShift Service Mesh 1.0.3 RPMs (RHSA-2019:4222)

The remote Redhat Enterprise Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:4222 advisory. Red Hat OpenShift Service Mesh is Red Hat's distribution of the Istio service mesh project, tailored for installation into an on-premise...

9.8CVSS7.6AI score0.02502EPSS
SaveExploits3References9
RedHat Linux
RedHat Linux
•added 2019/12/11 9:29 p.m.•86 views

Critical: Red Hat Security Advisory: Red Hat OpenShift Service Mesh 1.0.3 RPMs security update

Red Hat OpenShift Service Mesh 1.0.3. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References...

9.8CVSS7.5AI score0.02502EPSS
SaveExploits3References4
Symantec
Symantec
•added 2019/12/11 12:00 a.m.•55 views

Envoy CVE-2019-18801 Heap Buffer Overflow Vulnerability

Description Envoy PHP is prone to a heap-based buffer-overflow vulnerability because the application fails to properly bounds-check user-supplied data before copying it into an insufficiently sized buffer. Successfully exploiting this issue allows attackers to execute arbitrary code in the contex...

0.3AI score0.02502EPSS
SaveExploits1References2Affected Software3
BDU FSTEC
BDU FSTEC
•added 2019/11/18 12:00 a.m.•17 views

The vulnerability of the BKE_mesh_calc_normals_tessface component in the software suite for creating 3D computer graphics in Blender allows a hacker to execute arbitrary code.

The vulnerability of the BKEmeshcalcnormalstessface component in the software suite for creating 3D computer graphics in Blender is caused by a numerical overflow. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created blend file...

10CVSS7.9AI score0.01953EPSS
SaveExploits1References6Affected Software2
BDU FSTEC
BDU FSTEC
•added 2019/11/18 12:00 a.m.•18 views

The vulnerability of the Mesh component of the software suite used to create 3D computer graphics in Blender allows a hacker to execute arbitrary code.

The vulnerability of the Mesh component in Blender’s 3D computer graphics software is caused by a numerical overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created blend file...

10CVSS7.9AI score0.01953EPSS
SaveExploits1References6Affected Software2
BDU FSTEC
BDU FSTEC
•added 2019/11/18 12:00 a.m.•20 views

The vulnerability of the Mesh component of the software suite used to create 3D computer graphics in Blender allows a hacker to execute arbitrary code.

The vulnerability of the Mesh component in Blender’s 3D computer graphics software is caused by a numerical overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created blend file...

10CVSS7.9AI score0.01785EPSS
SaveExploits1References6Affected Software2
Wallarm Lab
Wallarm Lab
•added 2019/11/15 11:40 p.m.•51 views

Wallarm Launches Support of Envoy Proxy/ Envoy API Protection

Wallarm can protect North-South API in the applications that use Envoy as an alternative Ingress controller at the front end of a Kubernetes cluster. Wallarm can also protect edge traffic and also East-West Envoy API for Service-Mesh and Istio. The post Wallarm Launches Support of Envoy Proxy/...

2.8AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2019/11/14 12:00 a.m.•23 views

Fedora 31 : bluez / iwd / libell (2019-17419b24a3)

bluez 5.52 : - improvements for bluetooth mesh - audio bug fixes - general bug fixes ---- ell 0.26 : - Fix issue with memory leak and TLS certificates. - Fix issue with buffer size and TLS PRF handling. - Add support for D-Bus non-root ObjectManager. iwd 1.0 : - Add support for stable D-Bus...

5.8AI score
SaveExploits0References1
Wallarm Lab
Wallarm Lab
•added 2019/11/08 3:12 a.m.•50 views

Is Service Mesh right for your infrastructure?

Andrew Jenkins of Aspen Mesh identifies three deployment options with regards to how a Service Mesh delivers its services: As a sidecar that runs alongside your microservice container As a library that can be built into each of the microservices As an agent that sit in the container infrastructur...

2.9AI score
SaveExploits0
RedHat Linux
RedHat Linux
•added 2019/11/07 3:16 p.m.•12 views

Important: Red Hat Enhancement Advisory: Red Hat OpenShift Service Mesh 1.0.2 RPMs

Red Hat OpenShift Service Mesh 1.0.2. Red Hat OpenShift Service Mesh is Red Hat's distribution of the Istio service mesh project, tailored for installation into an on-premise OpenShift Container Platform installation. The OpenShift Service Mesh release notes provide information on the features an...

7.5CVSS6.6AI score0.25939EPSS
SaveExploits2References1
Tenable Nessus
Tenable Nessus
•added 2019/10/16 12:00 a.m.•54 views

RHEL 7 / 8 : Red Hat OpenShift Service Mesh 1.0.1 RPMs (Important) (RHSA-2019:3041)

The remote Redhat Enterprise Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:3041 advisory. Red Hat OpenShift Service Mesh is Red Hat's distribution of the Istio service mesh project, tailored for installation into an on-premise...

7.8CVSS7.5AI score0.81556EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
•added 2019/10/14 4:55 p.m.•122 views

Important: Red Hat Security Advisory: Red Hat OpenShift Service Mesh 1.0.1 RPMs

Red Hat OpenShift Service Mesh 1.0.1. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References...

7.8CVSS7.4AI score0.81556EPSS
SaveExploits0References4
OSV
OSV
•added 2019/10/03 4:15 p.m.•9 views

DEBIAN-CVE-2018-16227

The IEEE 802.11 parser in tcpdump before 4.9.3 has a buffer over-read in print-80211.c for the Mesh Flags subfield...

7.5CVSS6.6AI score0.06816EPSS
SaveExploits0References1
NVD
NVD
•added 2019/10/03 4:15 p.m.•28 views

CVE-2018-16227

The IEEE 802.11 parser in tcpdump before 4.9.3 has a buffer over-read in print-80211.c for the Mesh Flags subfield...

7.5CVSS8.7AI score0.06816EPSS
SaveExploits0References16
OSV
OSV
•added 2019/10/03 4:15 p.m.•9 views

ALPINE-CVE-2018-16227

The IEEE 802.11 parser in tcpdump before 4.9.3 has a buffer over-read in print-80211.c for the Mesh Flags subfield...

7.5CVSS7.5AI score0.06816EPSS
SaveExploits0References1
Rows per page
Query Builder