Denial Of Service

containerd is vulnerable to denial of service. An attacker is able to input a malicious crafted container image which changes the permission of existing files in the host's system which can prevent file permission to expected owner of the file...

CVE-2020-24034

Sagemcom F@ST 5280 routers using firmware version 1.150.61 have insecure deserialization that allows any authenticated user to perform a privilege escalation to any other user. By making a request with valid sessid, nonce, and ha1 values inside of the serialized session cookie, an attacker may...